{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0.6.1","last_affected":"1.0.7"}],"component":"ladon","cve_ids":["CVE-2019-1010268"],"ecosystem":"PyPI","epss":0.05877,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-vg35-vc9f-q7x2","id":"tcs_01M5KG03XP8XPJ55KZ1KEDJE7K","modified_at":"2025-02-18T05:29:12.339155Z","published_at":"2019-07-26T16:09:54Z","references":["https://osv.dev/vulnerability/GHSA-vg35-vc9f-q7x2","https://nvd.nist.gov/vuln/detail/CVE-2019-1010268","https://bitbucket.org/jakobsg/ladon","https://bitbucket.org/jakobsg/ladon/pull-requests/9","https://bitbucket.org/jakobsg/ladon/src/42944fc012a3a48214791c120ee5619434505067/src/ladon/interfaces/soap.py#lines-688","https://github.com/advisories/GHSA-vg35-vc9f-q7x2","https://github.com/pypa/advisory-database/tree/main/vulns/ladon/PYSEC-2019-184.yaml","https://www.exploit-db.com/exploits/43113"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-vg35-vc9f-q7x2","url":"https://osv.dev/vulnerability/GHSA-vg35-vc9f-q7x2"}],"summary":"Improper Restriction of XML External Entity Reference in ladon"}