{"action":"Upgrade qpid-python to 0.22 or later.","affected":[{"fixed":"0.22","introduced":"0"}],"component":"qpid-python","cve_ids":["CVE-2013-1909"],"ecosystem":"PyPI","epss":0.01824,"exploited":false,"fixed_versions":["0.22"],"ghsa_id":"GHSA-3g2p-7c6p-vj8c","id":"tcs_01M5KG5T28Y0GGPZ4NP14EPGC0","modified_at":"2026-06-10T17:01:46.917730100Z","published_at":"2013-08-23T16:55:00Z","references":["https://osv.dev/vulnerability/PYSEC-2013-25","https://issues.apache.org/jira/browse/QPID-4918","http://qpid.apache.org/releases/qpid-0.22/release-notes.html","http://secunia.com/advisories/54137","http://secunia.com/advisories/53968","http://rhn.redhat.com/errata/RHSA-2013-1024.html","http://svn.apache.org/viewvc?view=revision&revision=1460013","https://github.com/advisories/GHSA-3g2p-7c6p-vj8c"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"PYSEC-2013-25","url":"https://osv.dev/vulnerability/PYSEC-2013-25"}],"summary":"The Python client in Apache Qpid before 2.2 does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which all"}