{"action":"Upgrade python-scciclient to 0.12.0 or later.","affected":[{"fixed":"0.12.0","introduced":"0"}],"component":"python-scciclient","cve_ids":["CVE-2022-2996"],"ecosystem":"PyPI","epss":0.00663,"exploited":false,"fixed_versions":["0.12.0"],"ghsa_id":"GHSA-rf3f-3p37-2qh4","id":"tcs_01M5KGHSWEFMY6VQ4E5X5JGPWM","modified_at":"2024-11-25T22:42:01.116865Z","published_at":"2022-09-01T18:15:00Z","references":["https://osv.dev/vulnerability/PYSEC-2022-43152","https://opendev.org/x/python-scciclient/commit/274dca0344b65b4ac113d3271d21c17e970a636c","https://lists.debian.org/debian-lts-announce/2022/11/msg00006.html"],"severity":{"label":"high","score":7.4},"sources":[{"source":"osv","source_id":"PYSEC-2022-43152","url":"https://osv.dev/vulnerability/PYSEC-2022-43152"}],"summary":"A flaw was found in the python-scciclient when making an HTTPS connection to a server where the server's certificate would not be verified. This issue opens up the connection to possible Man-in-the-mi"}