{"action":"Upgrade dnslib to 0.9.17 or later.","affected":[{"fixed":"0.9.17","introduced":"0"}],"component":"dnslib","cve_ids":["CVE-2022-22846"],"ecosystem":"PyPI","epss":0.00872,"exploited":false,"fixed_versions":["0.9.17"],"ghsa_id":"GHSA-r478-c2pc-m7gx","id":"tcs_01M5KFX49RWF5ENVQ52NVY4PJJ","modified_at":"2024-09-18T20:25:01.257498Z","published_at":"2022-01-12T20:07:10Z","references":["https://osv.dev/vulnerability/GHSA-r478-c2pc-m7gx","https://nvd.nist.gov/vuln/detail/CVE-2022-22846","https://github.com/paulc/dnslib/issues/30","https://github.com/paulc/dnslib/commit/76e8677699ed098387d502c57980f58da642aeba","https://github.com/advisories/GHSA-r478-c2pc-m7gx","https://github.com/paulc/dnslib","https://github.com/pypa/advisory-database/tree/main/vulns/dnslib/PYSEC-2022-4.yaml"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-r478-c2pc-m7gx","url":"https://osv.dev/vulnerability/GHSA-r478-c2pc-m7gx"}],"summary":"dnslib has DNS reply verification issue"}