{"action":"Upgrade elastic-apm to 5.1.0 or later.","affected":[{"fixed":"5.1.0","introduced":"0"}],"component":"elastic-apm","cve_ids":["CVE-2019-7617"],"ecosystem":"PyPI","epss":0.0151,"exploited":false,"fixed_versions":["5.1.0"],"ghsa_id":"GHSA-22jh-6gx8-f944","id":"tcs_01M5KG8SF34MBYSDZXWT6SMH89","modified_at":"2026-06-10T17:01:13.615863347Z","published_at":"2019-08-22T17:15:00Z","references":["https://osv.dev/vulnerability/PYSEC-2019-178","https://www.elastic.co/community/security/","https://discuss.elastic.co/t/elastic-apm-agent-for-python-5-1-0-security-update/196145","https://github.com/advisories/GHSA-22jh-6gx8-f944"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"PYSEC-2019-178","url":"https://osv.dev/vulnerability/PYSEC-2019-178"}],"summary":"When the Elastic APM agent for Python versions before 5.1.0 is run as a CGI script, there is a variable name clash flaw if a remote attacker can control the proxy header. This could result in an attac"}