{"action":"Upgrade twisted to 19.7.0rc1 or later.","affected":[{"fixed":"19.7.0rc1","introduced":"0"}],"component":"twisted","cve_ids":["CVE-2019-12855"],"ecosystem":"PyPI","epss":0.01809,"exploited":false,"fixed_versions":["19.7.0rc1"],"ghsa_id":"GHSA-65rm-h285-5cc5","id":"tcs_01M5KG8FHKQGVQ3EE244FG6KDX","modified_at":"2023-11-08T04:01:06.614992Z","published_at":"2019-06-16T12:29:00Z","references":["https://osv.dev/vulnerability/PYSEC-2019-129","https://twistedmatrix.com/trac/ticket/9561","https://github.com/twisted/twisted/pull/1147","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PLTZDMFBNFSJMBXYJNGJHENJA4H2TSMZ/","http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00013.html","http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00028.html","https://usn.ubuntu.com/4308-1/","https://usn.ubuntu.com/4308-2/","https://www.oracle.com/security-alerts/cpuapr2020.html","https://github.com/advisories/GHSA-65rm-h285-5cc5"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"PYSEC-2019-129","url":"https://osv.dev/vulnerability/PYSEC-2019-129"}],"summary":"In words.protocols.jabber.xmlstream in Twisted through 19.2.1, XMPP support did not verify certificates when used with TLS, allowing an attacker to MITM connections."}