{"action":"Upgrade python-apt to 0.8.3ubuntu7.5 or later.","affected":[{"fixed":"0.8.3ubuntu7.5","introduced":"0"},{"fixed":"0.9.3.5ubuntu3","introduced":"0.9.0"},{"fixed":"1.6.5ubuntu0.1","introduced":"1.2.0"},{"fixed":"1.9.0ubuntu1.2","introduced":"1.7.0"},{"fixed":"1.9.5","introduced":"1.9.1"}],"component":"python-apt","cve_ids":["CVE-2019-15796"],"ecosystem":"PyPI","epss":0.00509,"exploited":false,"fixed_versions":["0.8.3ubuntu7.5","0.9.3.5ubuntu3","1.6.5ubuntu0.1","1.9.0ubuntu1.2","1.9.5"],"ghsa_id":"GHSA-pj65-3pf6-c5q4","id":"tcs_01M5KFT7P9QH0Y5N9FS773Z9N1","modified_at":"2023-11-08T04:01:15.371344Z","published_at":"2022-05-24T17:12:47Z","references":["https://osv.dev/vulnerability/GHSA-pj65-3pf6-c5q4","https://nvd.nist.gov/vuln/detail/CVE-2019-15796","https://github.com/excid3/python-apt","https://usn.ubuntu.com/4247-1","https://usn.ubuntu.com/4247-3"],"severity":{"label":"medium","score":4.7},"sources":[{"source":"osv","source_id":"GHSA-pj65-3pf6-c5q4","url":"https://osv.dev/vulnerability/GHSA-pj65-3pf6-c5q4"}],"summary":"python-apt Does Not Check Hash Signature"}