{"action":"Upgrade typed-ast to 1.3.2 or later.","affected":[{"fixed":"1.3.2","introduced":"1.3.0"}],"component":"typed-ast","cve_ids":["CVE-2019-19274"],"ecosystem":"PyPI","epss":0.03283,"exploited":false,"fixed_versions":["1.3.2"],"ghsa_id":"GHSA-m3jw-62m7-jjcm","id":"tcs_01M5KFQ30W46X1DC44MSRHW29K","modified_at":"2024-09-09T21:48:42.688121Z","published_at":"2019-12-02T18:02:02Z","references":["https://osv.dev/vulnerability/GHSA-m3jw-62m7-jjcm","https://nvd.nist.gov/vuln/detail/CVE-2019-19274","https://github.com/python/cpython/commit/a4d78362397fc3bced6ea80fbc7b5f4827aec55e","https://github.com/python/cpython/commit/dcfcd146f8e6fc5c2fc16a4c192a0c5f5ca8c53c","https://github.com/python/typed_ast/commit/156afcb26c198e162504a57caddfe0acd9ed7dce","https://github.com/python/typed_ast/commit/dc317ac9cff859aa84eeabe03fb5004982545b3b","https://bugs.python.org/issue36495","https://github.com/advisories/GHSA-m3jw-62m7-jjcm","https://github.com/pypa/advisory-database/tree/main/vulns/typed-ast/PYSEC-2019-130.yaml","https://github.com/python/typed_ast","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LG5H4Q6LFVRX7SFXLBEJMNQFI4T5SCEA"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-m3jw-62m7-jjcm","url":"https://osv.dev/vulnerability/GHSA-m3jw-62m7-jjcm"}],"summary":"typed-ast Out-of-bounds Read"}