{"action":"Upgrade modulemd to 1.3.2 or later.","affected":[{"fixed":"1.3.2","introduced":"0"}],"component":"modulemd","cve_ids":["CVE-2017-1002157"],"ecosystem":"PyPI","epss":0.02882,"exploited":false,"fixed_versions":["1.3.2"],"ghsa_id":"GHSA-jhjh-ghwx-6h7r","id":"tcs_01M5KG8MP5N8FT1QGCSTHS9D95","modified_at":"2023-11-08T03:58:48.372528Z","published_at":"2019-01-10T21:29:00Z","references":["https://osv.dev/vulnerability/PYSEC-2019-153","https://pagure.io/modulemd/issue/55","https://github.com/advisories/GHSA-jhjh-ghwx-6h7r"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"PYSEC-2019-153","url":"https://osv.dev/vulnerability/PYSEC-2019-153"}],"summary":"modulemd 1.3.1 and earlier uses an unsafe function for processing externally provided data, leading to remote code execution."}