{"action":"Upgrade aioxmpp to 0.10.3 or later.","affected":[{"fixed":"0.10.3","introduced":"0"}],"component":"aioxmpp","cve_ids":["CVE-2019-1000007"],"ecosystem":"PyPI","epss":0.0117,"exploited":false,"fixed_versions":["0.10.3"],"ghsa_id":"GHSA-6m9g-jr8c-cqw3","id":"tcs_01M5KF3PQYAFZKVXA9MAEY2GE4","modified_at":"2024-09-04T20:04:41.882014Z","published_at":"2020-04-29T17:12:39Z","references":["https://osv.dev/vulnerability/GHSA-6m9g-jr8c-cqw3","https://github.com/horazont/aioxmpp/security/advisories/GHSA-6m9g-jr8c-cqw3","https://nvd.nist.gov/vuln/detail/CVE-2019-1000007","https://github.com/horazont/aioxmpp/pull/268","https://github.com/horazont/aioxmpp/commit/29ff0838a40f58efe30a4bbcea95aa8dab7da475","https://github.com/horazont/aioxmpp/commit/f151f920f439d97d4103fc11057ed6dc34fe98be","https://github.com/advisories/GHSA-6m9g-jr8c-cqw3","https://github.com/horazont/aioxmpp","https://github.com/pypa/advisory-database/tree/main/vulns/aioxmpp/PYSEC-2019-1.yaml"],"severity":{"label":"high","score":7.4},"sources":[{"source":"osv","source_id":"GHSA-6m9g-jr8c-cqw3","url":"https://osv.dev/vulnerability/GHSA-6m9g-jr8c-cqw3"}],"summary":"Depth counting error in guard() leading to multiple potential security issues in aioxmpp"}