{"action":"Upgrade py3-twisted to 19.7.0-r0 or later.","affected":[{"fixed":"19.7.0-r0","introduced":"0"}],"component":"py3-twisted","cve_ids":[],"ecosystem":"Alpine","ecosystem_qualifier":"Alpine:v3.21","exploited":false,"fixed_versions":["19.7.0-r0"],"id":"tcs_01M6GC39QT812STQFDW4RWVETJ","modified_at":"2026-11-03T06:30:54.676353142Z","published_at":"2019-06-16T12:29:00.227Z","references":["https://osv.dev/vulnerability/ALPINE-CVE-2019-12855","https://security.alpinelinux.org/vuln/CVE-2019-12855"],"severity":{"label":"high","score":7.4},"sources":[{"source":"osv","source_id":"ALPINE-CVE-2019-12855#Alpine:v3.21/py3-twisted","url":"https://osv.dev/vulnerability/ALPINE-CVE-2019-12855"}],"summary":"In words.protocols.jabber.xmlstream in Twisted through 19.2.1, XMPP support did not verify certificates when used with TLS, allowing an attacker to MITM connections."}