{"action":"Upgrade modoboa-dmarc to 1.2.0 or later.","affected":[{"fixed":"1.2.0","introduced":"0"}],"component":"modoboa-dmarc","cve_ids":["CVE-2019-19702"],"ecosystem":"PyPI","epss":0.01465,"exploited":false,"fixed_versions":["1.2.0"],"ghsa_id":"GHSA-vc42-mgr2-w34r","id":"tcs_01M5KG8BCAA2CNVMQ0QXCPPVH4","modified_at":"2026-06-10T17:02:20.693249331Z","published_at":"2019-12-10T20:15:00Z","references":["https://osv.dev/vulnerability/PYSEC-2019-105","https://github.com/modoboa/modoboa-dmarc/issues/38","https://github.com/advisories/GHSA-vc42-mgr2-w34r"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"PYSEC-2019-105","url":"https://osv.dev/vulnerability/PYSEC-2019-105"}],"summary":"The modoboa-dmarc plugin 1.1.0 for Modoboa is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this to perform a denial of service"}