{"action":"Upgrade dnslib to 0.9.17 or later.","affected":[{"fixed":"0.9.17","introduced":"0"}],"component":"dnslib","cve_ids":["CVE-2022-22846"],"ecosystem":"PyPI","epss":0.00872,"exploited":false,"fixed_versions":["0.9.17"],"ghsa_id":"GHSA-r478-c2pc-m7gx","id":"tcs_01M5KGH5TKHBN6Z90XEPT51MYM","modified_at":"2023-11-08T04:08:14.013022Z","published_at":"2022-01-10T14:12:00Z","references":["https://osv.dev/vulnerability/PYSEC-2022-4","https://github.com/paulc/dnslib/issues/30","https://github.com/advisories/GHSA-r478-c2pc-m7gx"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"PYSEC-2022-4","url":"https://osv.dev/vulnerability/PYSEC-2022-4"}],"summary":"The dnslib package through 0.9.16 for Python does not verify that the ID value in a DNS reply matches an ID value in a query."}