{"action":"Upgrade mofh to 1.0.1 or later.","affected":[{"fixed":"1.0.1","introduced":"0"}],"component":"mofh","cve_ids":[],"ecosystem":"PyPI","exploited":false,"fixed_versions":["1.0.1"],"ghsa_id":"GHSA-7r9x-qrpr-3cxw","id":"tcs_01M5KF6J8BCA6XVXXCP61G67R9","modified_at":"2024-12-03T06:07:30.576416Z","published_at":"2022-08-11T18:06:05Z","references":["https://osv.dev/vulnerability/GHSA-7r9x-qrpr-3cxw","https://github.com/Wallvon/mofh/security/advisories/GHSA-7r9x-qrpr-3cxw","https://github.com/Wallvon/mofh/commit/da0d33cfd368e2f237ab28bf7a7f00e3d281005a","https://github.com/Wallvon/mofh","https://www.acunetix.com/vulnerabilities/web/xml-quadratic-blowup-denial-of-service-attack"],"severity":{"label":"medium"},"sources":[{"source":"osv","source_id":"GHSA-7r9x-qrpr-3cxw","url":"https://osv.dev/vulnerability/GHSA-7r9x-qrpr-3cxw"}],"summary":"mofh Vulnerable to Improper Restriction of XML External Entity Reference"}