{"action":"Upgrade pyamf to 0.8.0 or later.","affected":[{"fixed":"0.8.0","introduced":"0"}],"component":"pyamf","cve_ids":["CVE-2015-8549"],"ecosystem":"PyPI","epss":0.0177,"exploited":false,"fixed_versions":["0.8.0"],"ghsa_id":"GHSA-m7m4-4vm8-55wg","id":"tcs_01M5KFQKET9M29YKNJ0G0GMNVC","modified_at":"2024-10-21T20:26:37.499132Z","published_at":"2022-05-24T17:06:13Z","references":["https://osv.dev/vulnerability/GHSA-m7m4-4vm8-55wg","https://nvd.nist.gov/vuln/detail/CVE-2015-8549","https://github.com/hydralabs/pyamf/pull/58","https://github.com/advisories/GHSA-m7m4-4vm8-55wg","https://github.com/hydralabs/pyamf","https://github.com/hydralabs/pyamf/releases/tag/v0.8.0","https://github.com/pypa/advisory-database/tree/main/vulns/pyamf/PYSEC-2020-339.yaml","https://pypi.org/project/pyamf","http://www.ocert.org/advisories/ocert-2015-011.html"],"severity":{"label":"high","score":7.1},"sources":[{"source":"osv","source_id":"GHSA-m7m4-4vm8-55wg","url":"https://osv.dev/vulnerability/GHSA-m7m4-4vm8-55wg"}],"summary":"PyAMF vulnerable to XML external entity (XXE)"}