{"action":"Upgrade mitmproxy to 4.0.4 or later.","affected":[{"fixed":"4.0.4","introduced":"0"}],"component":"mitmproxy","cve_ids":["CVE-2018-14505"],"ecosystem":"PyPI","epss":0.03348,"exploited":false,"fixed_versions":["4.0.4"],"ghsa_id":"GHSA-6m53-c78q-7qmg","id":"tcs_01M5KG827ZC4WRTWGCAD6Z5RGR","modified_at":"2023-11-08T03:59:55.280113Z","published_at":"2018-07-22T18:29:00Z","references":["https://osv.dev/vulnerability/PYSEC-2018-56","https://github.com/mitmproxy/mitmproxy/pull/3243","https://github.com/mitmproxy/mitmproxy/issues/3234","https://github.com/advisories/GHSA-6m53-c78q-7qmg"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"PYSEC-2018-56","url":"https://osv.dev/vulnerability/PYSEC-2018-56"}],"summary":"mitmweb in mitmproxy v4.0.3 allows DNS Rebinding attacks, related to tools/web/app.py."}