{"action":"Upgrade cvrf2csaf to 1.0.0rc2 or later.","affected":[{"fixed":"1.0.0rc2","introduced":"0"}],"component":"cvrf2csaf","cve_ids":["CVE-2022-27193"],"ecosystem":"PyPI","epss":0.00695,"exploited":false,"fixed_versions":["1.0.0rc2"],"ghsa_id":"GHSA-m8gq-83gh-v42v","id":"tcs_01M5KFQNR62CM2GTKDA3EYED2A","modified_at":"2026-07-06T08:11:08.763229515Z","published_at":"2022-03-16T00:00:49Z","references":["https://osv.dev/vulnerability/GHSA-m8gq-83gh-v42v","https://nvd.nist.gov/vuln/detail/CVE-2022-27193","https://github.com/csaf-tools/CVRF-CSAF-Converter","https://github.com/csaf-tools/CVRF-CSAF-Converter/releases/tag/1.0.0-rc2"],"severity":{"label":"medium","score":6.1},"sources":[{"source":"osv","source_id":"GHSA-m8gq-83gh-v42v","url":"https://osv.dev/vulnerability/GHSA-m8gq-83gh-v42v"}],"summary":"XML External Entities Vulnerability in CVRF-CSAF-Converter"}