{"action":"Upgrade python-bugzilla to 0.9.0 or later.","affected":[{"fixed":"0.9.0","introduced":"0"}],"component":"python-bugzilla","cve_ids":["CVE-2013-2191"],"ecosystem":"PyPI","epss":0.00896,"exploited":false,"fixed_versions":["0.9.0"],"ghsa_id":"GHSA-2q4h-27m7-rj67","id":"tcs_01M5KG6F8QXNRKRTH9C8Z0AYP3","modified_at":"2026-06-10T17:01:45.649783522Z","published_at":"2014-02-08T00:55:00Z","references":["https://osv.dev/vulnerability/PYSEC-2014-88","http://lists.opensuse.org/opensuse-updates/2013-07/msg00026.html","http://www.openwall.com/lists/oss-security/2013/06/19/6","https://git.fedorahosted.org/cgit/python-bugzilla.git/commit/?id=a782282ee479ba4cc1b8b1d89700ac630ba83eef","https://lists.fedorahosted.org/pipermail/python-bugzilla/2013-June/000104.html","http://lists.opensuse.org/opensuse-updates/2013-07/msg00025.html","https://bugzilla.redhat.com/show_bug.cgi?id=951594","https://github.com/advisories/GHSA-2q4h-27m7-rj67"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"PYSEC-2014-88","url":"https://osv.dev/vulnerability/PYSEC-2014-88"}],"summary":"python-bugzilla before 0.9.0 does not validate X.509 certificates, which allows man-in-the-middle attackers to spoof Bugzilla servers via a crafted certificate."}