{"action":"Upgrade aioxmpp to 0.10.3 or later.","affected":[{"fixed":"0.10.3","introduced":"0"}],"component":"aioxmpp","cve_ids":["CVE-2019-1000007"],"ecosystem":"PyPI","epss":0.0117,"exploited":false,"fixed_versions":["0.10.3"],"ghsa_id":"GHSA-6m9g-jr8c-cqw3","id":"tcs_01M5KG8AJKMHKQBBG2XMJ394A6","modified_at":"2023-11-08T04:00:35.411338Z","published_at":"2019-02-04T21:29:00Z","references":["https://osv.dev/vulnerability/PYSEC-2019-1","https://github.com/horazont/aioxmpp/pull/268","https://github.com/advisories/GHSA-6m9g-jr8c-cqw3"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"PYSEC-2019-1","url":"https://osv.dev/vulnerability/PYSEC-2019-1"}],"summary":"aioxmpp version 0.10.2 and earlier contains a Improper Handling of Structural Elements vulnerability in Stanza Parser, rollback during error processing, aioxmpp.xso.model.guard function that can resul"}