{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0"}],"component":"python-py","cve_ids":[],"ecosystem":"Debian","ecosystem_qualifier":"Debian:13","exploited":false,"fixed_versions":[],"id":"tcs_01M5NH09VS66BC593944H4RM64","modified_at":"2026-10-15T08:02:45.407985031Z","published_at":"2022-10-16T06:15:09.797Z","references":["https://osv.dev/vulnerability/DEBIAN-CVE-2022-42969","https://security-tracker.debian.org/tracker/CVE-2022-42969"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"DEBIAN-CVE-2022-42969#Debian:13/python-py","url":"https://osv.dev/vulnerability/DEBIAN-CVE-2022-42969"}],"summary":"The py library through 1.11.0 for Python allows remote attackers to conduct a ReDoS (Regular expression Denial of Service) attack via a Subversion repository with crafted info data, because the InfoSv"}