{"action":"Upgrade mitmproxy to 4.0.4 or later.","affected":[{"fixed":"4.0.4","introduced":"0"}],"component":"mitmproxy","cve_ids":["CVE-2018-14505"],"ecosystem":"PyPI","epss":0.03348,"exploited":false,"fixed_versions":["4.0.4"],"ghsa_id":"GHSA-6m53-c78q-7qmg","id":"tcs_01M5KF3NVX784FDD7001XYT85W","modified_at":"2024-10-01T19:37:25.531922Z","published_at":"2018-07-31T18:18:19Z","references":["https://osv.dev/vulnerability/GHSA-6m53-c78q-7qmg","https://nvd.nist.gov/vuln/detail/CVE-2018-14505","https://github.com/mitmproxy/mitmproxy/issues/3234","https://github.com/mitmproxy/mitmproxy/pull/3243","https://github.com/mitmproxy/mitmproxy/commit/7f464b89296881f4d9ec032378c4418e832d17e3","https://github.com/advisories/GHSA-6m53-c78q-7qmg","https://github.com/mitmproxy/mitmproxy","https://github.com/pypa/advisory-database/tree/main/vulns/mitmproxy/PYSEC-2018-56.yaml"],"severity":{"label":"high","score":8.8},"sources":[{"source":"osv","source_id":"GHSA-6m53-c78q-7qmg","url":"https://osv.dev/vulnerability/GHSA-6m53-c78q-7qmg"}],"summary":"Mitmweb in mitmproxy allows DNS Rebinding attacks"}