{"action":"Upgrade cvrf2csaf to 1.0.0rc2 or later.","affected":[{"fixed":"1.0.0rc2","introduced":"0"}],"component":"cvrf2csaf","cve_ids":["CVE-2022-27193"],"ecosystem":"PyPI","epss":0.00695,"exploited":false,"fixed_versions":["1.0.0rc2"],"ghsa_id":"GHSA-m8gq-83gh-v42v","id":"tcs_01M5KHCHQKR78THXXNX5KH7HZ5","modified_at":"2026-07-06T08:00:11.738744040Z","published_at":"2026-07-02T14:13:16.551613Z","references":["https://osv.dev/vulnerability/PYSEC-2026-627","https://nvd.nist.gov/vuln/detail/CVE-2022-27193","https://github.com/csaf-tools/CVRF-CSAF-Converter","https://github.com/csaf-tools/CVRF-CSAF-Converter/releases/tag/1.0.0-rc2","https://pypi.org/project/cvrf2csaf","https://github.com/advisories/GHSA-m8gq-83gh-v42v"],"severity":{"label":"medium","score":6.1},"sources":[{"source":"osv","source_id":"PYSEC-2026-627","url":"https://osv.dev/vulnerability/PYSEC-2026-627"}],"summary":"XML External Entities Vulnerability in CVRF-CSAF-Converter"}