{"action":"Upgrade python-swiftclient to 2.0 or later.","affected":[{"fixed":"2.0","introduced":"1.0"}],"component":"python-swiftclient","cve_ids":["CVE-2013-6396"],"ecosystem":"PyPI","epss":0.00735,"exploited":false,"fixed_versions":["2.0"],"ghsa_id":"GHSA-p3xv-97g8-4wmj","id":"tcs_01M5KG60S8VG0SCPZKG1HRN5H5","modified_at":"2026-06-10T17:02:32.160455905Z","published_at":"2014-02-18T19:55:00Z","references":["https://osv.dev/vulnerability/PYSEC-2014-12","http://www.openwall.com/lists/oss-security/2014/02/17/7","https://bugs.launchpad.net/python-swiftclient/+bug/1199783","https://github.com/advisories/GHSA-p3xv-97g8-4wmj"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"PYSEC-2014-12","url":"https://osv.dev/vulnerability/PYSEC-2014-12"}],"summary":"The OpenStack Python client library for Swift (python-swiftclient) 1.0 through 1.9.0 does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and"}