{"action":"Upgrade python-engineio to 3.9.0 or later.","affected":[{"fixed":"3.9.0","introduced":"0"}],"component":"python-engineio","cve_ids":["CVE-2019-13611"],"ecosystem":"PyPI","epss":0.00853,"exploited":false,"fixed_versions":["3.9.0"],"ghsa_id":"GHSA-j3jp-gvr5-7hwq","id":"tcs_01M5KG8R22CT4V1FRR22NH4019","modified_at":"2023-11-08T04:01:08.654877Z","published_at":"2019-07-16T00:15:00Z","references":["https://osv.dev/vulnerability/PYSEC-2019-170","https://github.com/miguelgrinberg/python-engineio/issues/128","https://github.com/advisories/GHSA-j3jp-gvr5-7hwq"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"PYSEC-2019-170","url":"https://osv.dev/vulnerability/PYSEC-2019-170"}],"summary":"An issue was discovered in python-engineio through 3.8.2. There is a Cross-Site WebSocket Hijacking (CSWSH) vulnerability that allows attackers to make WebSocket connections to a server by using a vic"}