{"action":"Upgrade pyamf to 0.8.0 or later.","affected":[{"fixed":"0.8.0","introduced":"0"}],"component":"pyamf","cve_ids":["CVE-2015-8549"],"ecosystem":"PyPI","epss":0.0177,"exploited":false,"fixed_versions":["0.8.0"],"ghsa_id":"GHSA-m7m4-4vm8-55wg","id":"tcs_01M5KGAK3MTE9QMG3K9GD29GG1","modified_at":"2023-11-08T03:58:02.455853Z","published_at":"2020-01-15T15:15:00Z","references":["https://osv.dev/vulnerability/PYSEC-2020-339","http://www.securityfocus.com/archive/1/archive/1/537151/100/0/threaded","https://github.com/hydralabs/pyamf/releases/tag/v0.8.0","https://github.com/hydralabs/pyamf/pull/58","http://www.ocert.org/advisories/ocert-2015-011.html","https://pypi.org/project/pyamf","https://nvd.nist.gov/vuln/detail/CVE-2015-8549","https://github.com/advisories/GHSA-m7m4-4vm8-55wg"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"PYSEC-2020-339","url":"https://osv.dev/vulnerability/PYSEC-2020-339"}],"summary":"XML external entity (XXE) vulnerability in PyAMF before 0.8.0 allows remote attackers to cause a denial of service or read arbitrary files via a crafted Action Message Format (AMF) payload."}