{"action":"Upgrade txaws to 0.4.0 or later.","affected":[{"fixed":"0.4.0","introduced":"0"}],"component":"txaws","cve_ids":["CVE-2017-1000007"],"ecosystem":"PyPI","epss":0.00753,"exploited":false,"fixed_versions":["0.4.0"],"ghsa_id":"GHSA-cggm-52qp-wvw7","id":"tcs_01M5KFD07CWMJKN5ZFTTNRJ2NS","modified_at":"2024-11-18T23:02:31.402394Z","published_at":"2022-05-17T02:20:12Z","references":["https://osv.dev/vulnerability/GHSA-cggm-52qp-wvw7","https://nvd.nist.gov/vuln/detail/CVE-2017-1000007","https://github.com/twisted/txaws/issues/24","https://github.com/twisted/txaws/pull/26","https://github.com/twisted/txaws/commit/46b66c3dc315de7b5896d60531311ec9658bc466","https://github.com/pypa/advisory-database/tree/main/vulns/txaws/PYSEC-2017-85.yaml","https://github.com/twisted/txaws"],"severity":{"label":"medium","score":5.9},"sources":[{"source":"osv","source_id":"GHSA-cggm-52qp-wvw7","url":"https://osv.dev/vulnerability/GHSA-cggm-52qp-wvw7"}],"summary":"txAWS AWSServiceEndpoint defaults to not verifying server certificates"}