{"id":"CVE-2022-2255","aliases":["ALSA-2025:4791","AZL-10734","BIT-mod_wsgi-2022-2255","DEBIAN-CVE-2022-2255","DLA-3111-1","EUVD-2022-0159","GHSA-7527-8855-9cf8","MGASA-2022-0289","OESA-2022-1827","PYSEC-2022-254","RHSA-2025:4791","RLSA-2025:4791","SUSE-SU-2022:4010-1","SUSE-SU-2022:4013-1","SUSE-SU-2022:4488-1","UBUNTU-CVE-2022-2255","USN-5551-1","openSUSE-SU-2024:12535-1"],"status":"published","title":"Incorrect header handling in mod-wsgi","description":"A vulnerability was found in mod_wsgi. The X-Client-IP header is not removed from a request from an untrusted proxy, allowing an attacker to pass the X-Client-IP header to the target WSGI application because the condition to remove it is missing.","severity":{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.00939,"percentile":0.6116,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-345","CWE-348"],"published":"2022-07-22T14:01:00Z","modified":"2026-10-29T11:02:23Z","fixes":[{"ecosystem":"PyPI","package":"mod-wsgi","fixed_in":["4.9.3"],"sources":["ghsa","osv"]},{"ecosystem":"AlmaLinux:8","package":"python39","fixed_in":["3.9.20-1.module_el8.10.0+3902+1690be06"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"python39-PyMySQL","fixed_in":["0.10.1-2.module_el8.6.0+2780+a40f65e1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"python39-cffi","fixed_in":["1.14.3-2.module_el8.6.0+2780+a40f65e1","1.14.3-2.module_el8.6.0+3248+c431e88c"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"python39-chardet","fixed_in":["3.0.4-19.module_el8.6.0+2780+a40f65e1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"python39-cryptography","fixed_in":["3.3.1-3.module_el8.10.0+3765+2f9a457d"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"python39-devel","fixed_in":["3.9.20-1.module_el8.10.0+3902+1690be06"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"python39-idle","fixed_in":["3.9.20-1.module_el8.10.0+3902+1690be06"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"python39-idna","fixed_in":["2.10-4.module_el8.10.0+3849+a48d89aa"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"python39-libs","fixed_in":["3.9.20-1.module_el8.10.0+3902+1690be06"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"python39-lxml","fixed_in":["4.6.5-1.module_el8.6.0+2780+a40f65e1","4.6.5-1.module_el8.6.0+3248+c431e88c"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"python39-mod_wsgi","fixed_in":["4.7.1-7.module_el8.10.0+3989+a618fe15.1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"python39-numpy","fixed_in":["1.19.4-3.module_el8.6.0+2780+a40f65e1","1.19.4-3.module_el8.6.0+3248+c431e88c"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"python39-numpy-doc","fixed_in":["1.19.4-3.module_el8.6.0+2780+a40f65e1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"python39-numpy-f2py","fixed_in":["1.19.4-3.module_el8.6.0+2780+a40f65e1","1.19.4-3.module_el8.6.0+3248+c431e88c"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"python39-pip","fixed_in":["20.2.4-9.module_el8.10.0+3765+2f9a457d"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"python39-pip-wheel","fixed_in":["20.2.4-9.module_el8.10.0+3765+2f9a457d"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"python39-ply","fixed_in":["3.11-10.module_el8.6.0+2780+a40f65e1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"python39-psutil","fixed_in":["5.8.0-4.module_el8.6.0+2780+a40f65e1","5.8.0-4.module_el8.6.0+3248+c431e88c"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"python39-psycopg2","fixed_in":["2.8.6-3.module_el8.10.0+3765+2f9a457d"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"python39-psycopg2-doc","fixed_in":["2.8.6-3.module_el8.10.0+3765+2f9a457d"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"python39-psycopg2-tests","fixed_in":["2.8.6-3.module_el8.10.0+3765+2f9a457d"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"python39-pycparser","fixed_in":["2.20-3.module_el8.6.0+2780+a40f65e1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"python39-pysocks","fixed_in":["1.7.1-4.module_el8.6.0+2780+a40f65e1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"python39-pyyaml","fixed_in":["5.4.1-1.module_el8.6.0+2780+a40f65e1","5.4.1-1.module_el8.6.0+3248+c431e88c"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"python39-requests","fixed_in":["2.25.0-3.module_el8.9.0+3634+fb2a896c"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"python39-rpm-macros","fixed_in":["3.9.20-1.module_el8.10.0+3902+1690be06"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"python39-scipy","fixed_in":["1.5.4-5.module_el8.9.0+3634+fb2a896c"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"python39-setuptools","fixed_in":["50.3.2-6.module_el8.10.0+3885+d986a391"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"python39-setuptools-wheel","fixed_in":["50.3.2-6.module_el8.10.0+3885+d986a391"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"python39-six","fixed_in":["1.15.0-3.module_el8.6.0+2780+a40f65e1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"python39-test","fixed_in":["3.9.20-1.module_el8.10.0+3902+1690be06"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"python39-tkinter","fixed_in":["3.9.20-1.module_el8.10.0+3902+1690be06"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"python39-toml","fixed_in":["0.10.1-5.module_el8.6.0+2780+a40f65e1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"python39-urllib3","fixed_in":["1.25.10-5.module_el8.10.0+3765+2f9a457d"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"python39-wheel","fixed_in":["1:0.35.1-4.module_el8.6.0+2780+a40f65e1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"python39-wheel-wheel","fixed_in":["1:0.35.1-4.module_el8.6.0+2780+a40f65e1"],"sources":["osv"]},{"ecosystem":"Azure Linux:2","package":"mod_wsgi","fixed_in":["4.9.3-2"],"sources":["osv"]},{"ecosystem":"Bitnami","package":"mod_wsgi","fixed_in":["4.9.3"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"mod-wsgi","fixed_in":["4.9.0-1.1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"mod-wsgi","fixed_in":["4.9.0-1.1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"mod-wsgi","fixed_in":["4.9.0-1.1"],"sources":["osv"]},{"ecosystem":"Debian:10","package":"mod-wsgi","fixed_in":["4.6.5-1+deb10u1"],"sources":["osv"]},{"ecosystem":"Mageia:8","package":"apache-mod_wsgi","fixed_in":["4.6.8-4.1.mga8"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP1","package":"mod_wsgi","fixed_in":["4.6.4-3.oe1"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP3","package":"mod_wsgi","fixed_in":["4.6.4-3.oe1"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS","package":"mod_wsgi","fixed_in":["4.6.4-3.oe2203"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"PyYAML","fixed_in":["0:5.4.1-1.module+el8.9.0+19644+d68f775d"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"PyYAML-debugsource","fixed_in":["0:5.4.1-1.module+el8.9.0+19644+d68f775d"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"mod_wsgi","fixed_in":["0:4.7.1-7.module+el8.10.0+23075+0aa18782.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"numpy","fixed_in":["0:1.19.4-3.module+el8.9.0+19644+d68f775d"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"numpy-debugsource","fixed_in":["0:1.19.4-3.module+el8.9.0+19644+d68f775d"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python-PyMySQL","fixed_in":["0:0.10.1-2.module+el8.9.0+19644+d68f775d"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python-cffi","fixed_in":["0:1.14.3-2.module+el8.9.0+19644+d68f775d"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python-cffi-debugsource","fixed_in":["0:1.14.3-2.module+el8.9.0+19644+d68f775d"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python-chardet","fixed_in":["0:3.0.4-19.module+el8.9.0+19644+d68f775d"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python-cryptography","fixed_in":["0:3.3.1-3.module+el8.10.0+21271+eccd1d86"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python-cryptography-debugsource","fixed_in":["0:3.3.1-3.module+el8.10.0+21271+eccd1d86"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python-idna","fixed_in":["0:2.10-4.module+el8.10.0+21815+bb024982"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python-lxml","fixed_in":["0:4.6.5-1.module+el8.9.0+19644+d68f775d"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python-lxml-debugsource","fixed_in":["0:4.6.5-1.module+el8.9.0+19644+d68f775d"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python-ply","fixed_in":["0:3.11-10.module+el8.9.0+19644+d68f775d"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python-psutil","fixed_in":["0:5.8.0-4.module+el8.9.0+19644+d68f775d"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python-psutil-debugsource","fixed_in":["0:5.8.0-4.module+el8.9.0+19644+d68f775d"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python-psycopg2","fixed_in":["0:2.8.6-3.module+el8.10.0+21142+453d2b75"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python-psycopg2-debugsource","fixed_in":["0:2.8.6-3.module+el8.10.0+21142+453d2b75"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python-pycparser","fixed_in":["0:2.20-3.module+el8.9.0+19644+d68f775d"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python-pysocks","fixed_in":["0:1.7.1-4.module+el8.9.0+19644+d68f775d"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python-requests","fixed_in":["0:2.25.0-3.module+el8.9.0+19644+d68f775d"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python-toml","fixed_in":["0:0.10.1-5.module+el8.9.0+19644+d68f775d"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python-urllib3","fixed_in":["0:1.25.10-5.module+el8.10.0+20443+f0a692fe"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python-wheel","fixed_in":["1:0.35.1-4.module+el8.9.0+19644+d68f775d"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python39","fixed_in":["0:3.9.20-1.module+el8.10.0+22342+478c159e"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python39-PyMySQL","fixed_in":["0:0.10.1-2.module+el8.9.0+19644+d68f775d"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python39-cffi","fixed_in":["0:1.14.3-2.module+el8.9.0+19644+d68f775d"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python39-cffi-debuginfo","fixed_in":["0:1.14.3-2.module+el8.9.0+19644+d68f775d"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python39-chardet","fixed_in":["0:3.0.4-19.module+el8.9.0+19644+d68f775d"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python39-cryptography","fixed_in":["0:3.3.1-3.module+el8.10.0+21271+eccd1d86"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python39-cryptography-debuginfo","fixed_in":["0:3.3.1-3.module+el8.10.0+21271+eccd1d86"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python39-debuginfo","fixed_in":["0:3.9.20-1.module+el8.10.0+22342+478c159e"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python39-debugsource","fixed_in":["0:3.9.20-1.module+el8.10.0+22342+478c159e"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python39-devel","fixed_in":["0:3.9.20-1.module+el8.10.0+22342+478c159e"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python39-idle","fixed_in":["0:3.9.20-1.module+el8.10.0+22342+478c159e"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python39-idna","fixed_in":["0:2.10-4.module+el8.10.0+21815+bb024982"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python39-libs","fixed_in":["0:3.9.20-1.module+el8.10.0+22342+478c159e"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python39-lxml","fixed_in":["0:4.6.5-1.module+el8.9.0+19644+d68f775d"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python39-lxml-debuginfo","fixed_in":["0:4.6.5-1.module+el8.9.0+19644+d68f775d"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python39-mod_wsgi","fixed_in":["0:4.7.1-7.module+el8.10.0+23075+0aa18782.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python39-numpy","fixed_in":["0:1.19.4-3.module+el8.9.0+19644+d68f775d"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python39-numpy-debuginfo","fixed_in":["0:1.19.4-3.module+el8.9.0+19644+d68f775d"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python39-numpy-doc","fixed_in":["0:1.19.4-3.module+el8.9.0+19644+d68f775d"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python39-numpy-f2py","fixed_in":["0:1.19.4-3.module+el8.9.0+19644+d68f775d"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python39-pip","fixed_in":["0:20.2.4-9.module+el8.10.0+21329+8d76b841"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python39-pip-wheel","fixed_in":["0:20.2.4-9.module+el8.10.0+21329+8d76b841"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python39-ply","fixed_in":["0:3.11-10.module+el8.9.0+19644+d68f775d"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python39-psutil","fixed_in":["0:5.8.0-4.module+el8.9.0+19644+d68f775d"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python39-psutil-debuginfo","fixed_in":["0:5.8.0-4.module+el8.9.0+19644+d68f775d"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python39-psycopg2","fixed_in":["0:2.8.6-3.module+el8.10.0+21142+453d2b75"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python39-psycopg2-debuginfo","fixed_in":["0:2.8.6-3.module+el8.10.0+21142+453d2b75"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python39-psycopg2-doc","fixed_in":["0:2.8.6-3.module+el8.10.0+21142+453d2b75"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python39-psycopg2-tests","fixed_in":["0:2.8.6-3.module+el8.10.0+21142+453d2b75"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python39-pycparser","fixed_in":["0:2.20-3.module+el8.9.0+19644+d68f775d"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python39-pysocks","fixed_in":["0:1.7.1-4.module+el8.9.0+19644+d68f775d"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python39-pyyaml","fixed_in":["0:5.4.1-1.module+el8.9.0+19644+d68f775d"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python39-pyyaml-debuginfo","fixed_in":["0:5.4.1-1.module+el8.9.0+19644+d68f775d"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python39-requests","fixed_in":["0:2.25.0-3.module+el8.9.0+19644+d68f775d"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python39-rpm-macros","fixed_in":["0:3.9.20-1.module+el8.10.0+22342+478c159e"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python39-scipy","fixed_in":["0:1.5.4-5.module+el8.9.0+19644+d68f775d"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python39-scipy-debuginfo","fixed_in":["0:1.5.4-5.module+el8.9.0+19644+d68f775d"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python39-setuptools","fixed_in":["0:50.3.2-6.module+el8.10.0+22183+c898c0c1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python39-setuptools-wheel","fixed_in":["0:50.3.2-6.module+el8.10.0+22183+c898c0c1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python39-six","fixed_in":["0:1.15.0-3.module+el8.9.0+19644+d68f775d"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python39-test","fixed_in":["0:3.9.20-1.module+el8.10.0+22342+478c159e"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python39-tkinter","fixed_in":["0:3.9.20-1.module+el8.10.0+22342+478c159e"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python39-toml","fixed_in":["0:0.10.1-5.module+el8.9.0+19644+d68f775d"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python39-urllib3","fixed_in":["0:1.25.10-5.module+el8.10.0+20443+f0a692fe"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python39-wheel","fixed_in":["1:0.35.1-4.module+el8.9.0+19644+d68f775d"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python39-wheel-wheel","fixed_in":["1:0.35.1-4.module+el8.9.0+19644+d68f775d"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python3x-pip","fixed_in":["0:20.2.4-9.module+el8.10.0+21329+8d76b841"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python3x-setuptools","fixed_in":["0:50.3.2-6.module+el8.10.0+22183+c898c0c1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python3x-six","fixed_in":["0:1.15.0-3.module+el8.9.0+19644+d68f775d"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"scipy","fixed_in":["0:1.5.4-5.module+el8.9.0+19644+d68f775d"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"scipy-debugsource","fixed_in":["0:1.5.4-5.module+el8.9.0+19644+d68f775d"],"sources":["osv"]},{"ecosystem":"Rocky Linux:8","package":"mod_wsgi","fixed_in":["0:4.7.1-7.module+el8.10.0+1582+bc278001","0:4.7.1-7.module+el8.10.0+1860+afcc1c71","0:4.7.1-7.module+el8.10.0+1978+d4f111ba.1"],"sources":["osv"]},{"ecosystem":"Rocky Linux:8","package":"numpy","fixed_in":["0:1.19.4-3.module+el8.10.0+1582+bc278001","0:1.19.4-3.module+el8.10.0+1860+afcc1c71"],"sources":["osv"]},{"ecosystem":"Rocky Linux:8","package":"python39","fixed_in":["0:3.9.20-1.module+el8.10.0+1876+829fd4e0"],"sources":["osv"]},{"ecosystem":"Rocky Linux:8","package":"python3x-pip","fixed_in":["0:20.2.4-9.module+el8.10.0+1721+e52d6351","0:20.2.4-9.module+el8.10.0+1860+afcc1c71"],"sources":["osv"]},{"ecosystem":"Rocky Linux:8","package":"python3x-setuptools","fixed_in":["0:50.3.2-6.module+el8.10.0+1861+0f5e39ec"],"sources":["osv"]},{"ecosystem":"Rocky Linux:8","package":"python3x-six","fixed_in":["0:1.15.0-3.module+el8.10.0+1860+afcc1c71","0:1.15.0-3.module+el8.10.0+1582+bc278001"],"sources":["osv"]},{"ecosystem":"Rocky Linux:8","package":"python-cffi","fixed_in":["0:1.14.3-2.module+el8.10.0+1582+bc278001","0:1.14.3-2.module+el8.10.0+1860+afcc1c71"],"sources":["osv"]},{"ecosystem":"Rocky Linux:8","package":"python-chardet","fixed_in":["0:3.0.4-19.module+el8.10.0+1582+bc278001","0:3.0.4-19.module+el8.10.0+1860+afcc1c71","0:3.0.4-19.module+el8.9.0+1418+f0d66789"],"sources":["osv"]},{"ecosystem":"Rocky Linux:8","package":"python-cryptography","fixed_in":["0:3.3.1-3.module+el8.10.0+1697+7e517775","0:3.3.1-3.module+el8.10.0+1860+afcc1c71"],"sources":["osv"]},{"ecosystem":"Rocky Linux:8","package":"python-idna","fixed_in":["0:2.10-4.module+el8.10.0+1809+41195054","0:2.10-4.module+el8.10.0+1860+afcc1c71"],"sources":["osv"]},{"ecosystem":"Rocky Linux:8","package":"python-lxml","fixed_in":["0:4.6.5-1.module+el8.10.0+1582+bc278001"],"sources":["osv"]},{"ecosystem":"Rocky Linux:8","package":"python-ply","fixed_in":["0:3.11-10.module+el8.10.0+1582+bc278001","0:3.11-10.module+el8.10.0+1860+afcc1c71","0:3.11-10.module+el8.9.0+1418+f0d66789"],"sources":["osv"]},{"ecosystem":"Rocky Linux:8","package":"python-psutil","fixed_in":["0:5.8.0-4.module+el8.9.0+1357+a3b80af7"],"sources":["osv"]},{"ecosystem":"Rocky Linux:8","package":"python-psycopg2","fixed_in":["0:2.8.6-3.module+el8.10.0+1860+afcc1c71","0:2.8.6-3.module+el8.10.0+1660+b5b6f004"],"sources":["osv"]},{"ecosystem":"Rocky Linux:8","package":"python-pycparser","fixed_in":["0:2.20-3.module+el8.10.0+1582+bc278001","0:2.20-3.module+el8.10.0+1860+afcc1c71"],"sources":["osv"]},{"ecosystem":"Rocky Linux:8","package":"python-PyMySQL","fixed_in":["0:0.10.1-2.module+el8.10.0+1592+61442852","0:0.10.1-2.module+el8.10.0+1860+afcc1c71","0:0.10.1-2.module+el8.10.0+1910+234ad790","0:0.10.1-2.module+el8.10.0+1582+bc278001"],"sources":["osv"]},{"ecosystem":"Rocky Linux:8","package":"python-pysocks","fixed_in":["0:1.7.1-4.module+el8.10.0+1582+bc278001","0:1.7.1-4.module+el8.10.0+1860+afcc1c71","0:1.7.1-4.module+el8.9.0+1418+f0d66789"],"sources":["osv"]},{"ecosystem":"Rocky Linux:8","package":"python-requests","fixed_in":["0:2.25.0-3.module+el8.10.0+1582+bc278001","0:2.25.0-3.module+el8.10.0+1860+afcc1c71"],"sources":["osv"]},{"ecosystem":"Rocky Linux:8","package":"python-toml","fixed_in":["0:0.10.1-5.module+el8.9.0+1332+dd574197"],"sources":["osv"]},{"ecosystem":"Rocky Linux:8","package":"python-urllib3","fixed_in":["0:1.25.10-5.module+el8.10.0+1860+afcc1c71","0:1.25.10-5.module+el8.10.0+1545+03246da9"],"sources":["osv"]},{"ecosystem":"Rocky Linux:8","package":"python-wheel","fixed_in":["1:0.35.1-4.module+el8.10.0+1582+bc278001","1:0.35.1-4.module+el8.10.0+1860+afcc1c71"],"sources":["osv"]},{"ecosystem":"Rocky Linux:8","package":"PyYAML","fixed_in":["0:5.4.1-1.module+el8.10.0+1582+bc278001","0:5.4.1-1.module+el8.10.0+1860+afcc1c71","0:5.4.1-1.module+el8.9.0+1418+f0d66789"],"sources":["osv"]},{"ecosystem":"Rocky Linux:8","package":"scipy","fixed_in":["0:1.5.4-5.module+el8.10.0+1582+bc278001","0:1.5.4-5.module+el8.10.0+1860+afcc1c71"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP4","package":"apache2-mod_wsgi","fixed_in":["4.7.1-150400.3.3.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.4","package":"apache2-mod_wsgi","fixed_in":["4.7.1-150400.3.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:HPE Helion OpenStack 8","package":"apache2-mod_wsgi","fixed_in":["4.4.13-3.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:OpenStack Cloud 8","package":"apache2-mod_wsgi","fixed_in":["4.4.13-3.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"apache2-mod_wsgi","fixed_in":["4.4.13-3.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 12","package":"apache2-mod_wsgi","fixed_in":["4.4.13-3.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Web and Scripting 12","package":"apache2-mod_wsgi","fixed_in":["4.4.13-3.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP1","package":"apache2-mod_wsgi","fixed_in":["4.5.18-150000.4.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP2","package":"apache2-mod_wsgi","fixed_in":["4.5.18-150000.4.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP3","package":"apache2-mod_wsgi","fixed_in":["4.5.18-150000.4.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Proxy Module 4.1","package":"apache2-mod_wsgi-python3","fixed_in":["4.5.18-150000.4.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Proxy Module 4.2","package":"apache2-mod_wsgi-python3","fixed_in":["4.5.18-150000.4.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Proxy Module 4.3","package":"apache2-mod_wsgi-python3","fixed_in":["4.5.18-150000.4.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Server Applications 15 SP3","package":"apache2-mod_wsgi-python3","fixed_in":["4.5.18-150000.4.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Server Applications 15 SP4","package":"apache2-mod_wsgi-python3","fixed_in":["4.5.18-150000.4.6.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.3","package":"apache2-mod_wsgi","fixed_in":["4.5.18-150000.4.6.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.3","package":"apache2-mod_wsgi-python3","fixed_in":["4.5.18-150000.4.6.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.4","package":"apache2-mod_wsgi-python3","fixed_in":["4.5.18-150000.4.6.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:18.04:LTS","package":"mod-wsgi","fixed_in":["4.5.17-1ubuntu1.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"mod-wsgi","fixed_in":["4.6.8-1ubuntu3.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"mod-wsgi","fixed_in":["4.9.0-1ubuntu0.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"apache2-mod_wsgi","fixed_in":["4.9.4-1.1"],"sources":["osv"]}],"affected":[{"source":"ghsa","ecosystem":"PyPI","package":"mod-wsgi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.3"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"python39","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.9.20-1.module_el8.10.0+3902+1690be06"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"python39-PyMySQL","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.10.1-2.module_el8.6.0+2780+a40f65e1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"python39-cffi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14.3-2.module_el8.6.0+2780+a40f65e1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"python39-cffi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14.3-2.module_el8.6.0+3248+c431e88c"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"python39-chardet","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.4-19.module_el8.6.0+2780+a40f65e1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"python39-cryptography","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.1-3.module_el8.10.0+3765+2f9a457d"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"python39-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.9.20-1.module_el8.10.0+3902+1690be06"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"python39-idle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.9.20-1.module_el8.10.0+3902+1690be06"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"python39-idna","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10-4.module_el8.10.0+3849+a48d89aa"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"python39-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.9.20-1.module_el8.10.0+3902+1690be06"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"python39-lxml","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.6.5-1.module_el8.6.0+2780+a40f65e1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"python39-lxml","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.6.5-1.module_el8.6.0+3248+c431e88c"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"python39-mod_wsgi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.7.1-7.module_el8.10.0+3989+a618fe15.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"python39-numpy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.19.4-3.module_el8.6.0+2780+a40f65e1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"python39-numpy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.19.4-3.module_el8.6.0+3248+c431e88c"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"python39-numpy-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.19.4-3.module_el8.6.0+2780+a40f65e1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"python39-numpy-f2py","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.19.4-3.module_el8.6.0+2780+a40f65e1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"python39-numpy-f2py","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.19.4-3.module_el8.6.0+3248+c431e88c"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"python39-pip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20.2.4-9.module_el8.10.0+3765+2f9a457d"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"python39-pip-wheel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20.2.4-9.module_el8.10.0+3765+2f9a457d"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"python39-ply","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11-10.module_el8.6.0+2780+a40f65e1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"python39-psutil","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.8.0-4.module_el8.6.0+2780+a40f65e1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"python39-psutil","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.8.0-4.module_el8.6.0+3248+c431e88c"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"python39-psycopg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.6-3.module_el8.10.0+3765+2f9a457d"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"python39-psycopg2-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.6-3.module_el8.10.0+3765+2f9a457d"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"python39-psycopg2-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.6-3.module_el8.10.0+3765+2f9a457d"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"python39-pycparser","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.20-3.module_el8.6.0+2780+a40f65e1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"python39-pysocks","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.1-4.module_el8.6.0+2780+a40f65e1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"python39-pyyaml","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.4.1-1.module_el8.6.0+2780+a40f65e1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"python39-pyyaml","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.4.1-1.module_el8.6.0+3248+c431e88c"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"python39-requests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.25.0-3.module_el8.9.0+3634+fb2a896c"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"python39-rpm-macros","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.9.20-1.module_el8.10.0+3902+1690be06"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"python39-scipy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.4-5.module_el8.9.0+3634+fb2a896c"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"python39-setuptools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"50.3.2-6.module_el8.10.0+3885+d986a391"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"python39-setuptools-wheel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"50.3.2-6.module_el8.10.0+3885+d986a391"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"python39-six","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.15.0-3.module_el8.6.0+2780+a40f65e1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"python39-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.9.20-1.module_el8.10.0+3902+1690be06"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"python39-tkinter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.9.20-1.module_el8.10.0+3902+1690be06"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"python39-toml","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.10.1-5.module_el8.6.0+2780+a40f65e1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"python39-urllib3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.25.10-5.module_el8.10.0+3765+2f9a457d"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"python39-wheel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:0.35.1-4.module_el8.6.0+2780+a40f65e1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"python39-wheel-wheel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:0.35.1-4.module_el8.6.0+2780+a40f65e1"}]}]},{"source":"osv","ecosystem":"Azure Linux:2","package":"mod_wsgi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.3-2"}]}]},{"source":"osv","ecosystem":"Bitnami","package":"mod_wsgi","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"4.9.3"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"mod-wsgi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.0-1.1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"mod-wsgi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.0-1.1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"mod-wsgi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.0-1.1"}]}]},{"source":"osv","ecosystem":"Debian:10","package":"mod-wsgi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.6.5-1+deb10u1"}]}],"versions":["4.6.5-1"]},{"source":"osv","ecosystem":"PyPI","package":"mod-wsgi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.3"}]}],"versions":["4.1.0","4.1.1","4.1.2","4.1.3","4.2.0","4.2.1","4.2.2","4.2.3","4.2.4","4.2.5","4.2.6","4.2.7","4.2.8","4.3.0","4.3.1","4.3.2","4.4.0","4.4.1","4.4.10","4.4.11","4.4.12","4.4.13","4.4.14","4.4.15","4.4.16","4.4.17","4.4.18","4.4.19","4.4.2","4.4.20","4.4.21","4.4.22","4.4.23","4.4.3","4.4.4","4.4.5","4.4.6","4.4.7","4.4.8","4.4.9","4.5.0","4.5.1","4.5.10","4.5.11","4.5.12","4.5.13","4.5.14","4.5.15","4.5.16","4.5.17","4.5.18","4.5.19","4.5.2","4.5.20","4.5.21","4.5.22","4.5.23","4.5.24","4.5.3","4.5.4","4.5.5","4.5.6","4.5.7","4.5.8","4.5.9","4.6.0","4.6.1","4.6.2","4.6.3","4.6.4","4.6.5","4.6.6","4.6.7","4.6.8","4.7.0","4.7.1","4.8.0","4.9.0","4.9.1","4.9.2"]},{"source":"osv","ecosystem":"Mageia:8","package":"apache-mod_wsgi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.6.8-4.1.mga8"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP1","package":"mod_wsgi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.6.4-3.oe1"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP3","package":"mod_wsgi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.6.4-3.oe1"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS","package":"mod_wsgi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.6.4-3.oe2203"}]}]},{"source":"osv","ecosystem":"PyPI","package":"mod-wsgi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.3"}]}],"versions":["4.1.0","4.1.1","4.1.2","4.1.3","4.2.0","4.2.1","4.2.2","4.2.3","4.2.4","4.2.5","4.2.6","4.2.7","4.2.8","4.3.0","4.3.1","4.3.2","4.4.0","4.4.1","4.4.10","4.4.11","4.4.12","4.4.13","4.4.14","4.4.15","4.4.16","4.4.17","4.4.18","4.4.19","4.4.2","4.4.20","4.4.21","4.4.22","4.4.23","4.4.3","4.4.4","4.4.5","4.4.6","4.4.7","4.4.8","4.4.9","4.5.0","4.5.1","4.5.10","4.5.11","4.5.12","4.5.13","4.5.14","4.5.15","4.5.16","4.5.17","4.5.18","4.5.19","4.5.2","4.5.20","4.5.21","4.5.22","4.5.23","4.5.24","4.5.3","4.5.4","4.5.5","4.5.6","4.5.7","4.5.8","4.5.9","4.6.0","4.6.1","4.6.2","4.6.3","4.6.4","4.6.5","4.6.6","4.6.7","4.6.8","4.7.0","4.7.1","4.8.0","4.9.0","4.9.1","4.9.2"]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"PyYAML","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.1-1.module+el8.9.0+19644+d68f775d"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"PyYAML-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.1-1.module+el8.9.0+19644+d68f775d"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"mod_wsgi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.7.1-7.module+el8.10.0+23075+0aa18782.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"numpy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.19.4-3.module+el8.9.0+19644+d68f775d"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"numpy-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.19.4-3.module+el8.9.0+19644+d68f775d"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python-PyMySQL","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.10.1-2.module+el8.9.0+19644+d68f775d"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python-cffi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.14.3-2.module+el8.9.0+19644+d68f775d"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python-cffi-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.14.3-2.module+el8.9.0+19644+d68f775d"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python-chardet","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.4-19.module+el8.9.0+19644+d68f775d"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python-cryptography","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.1-3.module+el8.10.0+21271+eccd1d86"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python-cryptography-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.1-3.module+el8.10.0+21271+eccd1d86"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python-idna","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.10-4.module+el8.10.0+21815+bb024982"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python-lxml","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.6.5-1.module+el8.9.0+19644+d68f775d"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python-lxml-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.6.5-1.module+el8.9.0+19644+d68f775d"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python-ply","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11-10.module+el8.9.0+19644+d68f775d"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python-psutil","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.8.0-4.module+el8.9.0+19644+d68f775d"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python-psutil-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.8.0-4.module+el8.9.0+19644+d68f775d"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python-psycopg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.8.6-3.module+el8.10.0+21142+453d2b75"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python-psycopg2-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.8.6-3.module+el8.10.0+21142+453d2b75"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python-pycparser","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.20-3.module+el8.9.0+19644+d68f775d"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python-pysocks","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.1-4.module+el8.9.0+19644+d68f775d"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python-requests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.25.0-3.module+el8.9.0+19644+d68f775d"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python-toml","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.10.1-5.module+el8.9.0+19644+d68f775d"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python-urllib3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.25.10-5.module+el8.10.0+20443+f0a692fe"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python-wheel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:0.35.1-4.module+el8.9.0+19644+d68f775d"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python39","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.9.20-1.module+el8.10.0+22342+478c159e"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python39-PyMySQL","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.10.1-2.module+el8.9.0+19644+d68f775d"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python39-cffi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.14.3-2.module+el8.9.0+19644+d68f775d"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python39-cffi-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.14.3-2.module+el8.9.0+19644+d68f775d"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python39-chardet","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.4-19.module+el8.9.0+19644+d68f775d"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python39-cryptography","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.1-3.module+el8.10.0+21271+eccd1d86"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python39-cryptography-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.1-3.module+el8.10.0+21271+eccd1d86"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python39-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.9.20-1.module+el8.10.0+22342+478c159e"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python39-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.9.20-1.module+el8.10.0+22342+478c159e"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python39-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.9.20-1.module+el8.10.0+22342+478c159e"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python39-idle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.9.20-1.module+el8.10.0+22342+478c159e"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python39-idna","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.10-4.module+el8.10.0+21815+bb024982"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python39-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.9.20-1.module+el8.10.0+22342+478c159e"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python39-lxml","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.6.5-1.module+el8.9.0+19644+d68f775d"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python39-lxml-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.6.5-1.module+el8.9.0+19644+d68f775d"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python39-mod_wsgi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.7.1-7.module+el8.10.0+23075+0aa18782.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python39-numpy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.19.4-3.module+el8.9.0+19644+d68f775d"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python39-numpy-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.19.4-3.module+el8.9.0+19644+d68f775d"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python39-numpy-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.19.4-3.module+el8.9.0+19644+d68f775d"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python39-numpy-f2py","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.19.4-3.module+el8.9.0+19644+d68f775d"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python39-pip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:20.2.4-9.module+el8.10.0+21329+8d76b841"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python39-pip-wheel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:20.2.4-9.module+el8.10.0+21329+8d76b841"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python39-ply","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11-10.module+el8.9.0+19644+d68f775d"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python39-psutil","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.8.0-4.module+el8.9.0+19644+d68f775d"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python39-psutil-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.8.0-4.module+el8.9.0+19644+d68f775d"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python39-psycopg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.8.6-3.module+el8.10.0+21142+453d2b75"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python39-psycopg2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.8.6-3.module+el8.10.0+21142+453d2b75"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python39-psycopg2-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.8.6-3.module+el8.10.0+21142+453d2b75"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python39-psycopg2-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.8.6-3.module+el8.10.0+21142+453d2b75"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python39-pycparser","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.20-3.module+el8.9.0+19644+d68f775d"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python39-pysocks","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.1-4.module+el8.9.0+19644+d68f775d"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python39-pyyaml","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.1-1.module+el8.9.0+19644+d68f775d"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python39-pyyaml-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.1-1.module+el8.9.0+19644+d68f775d"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python39-requests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.25.0-3.module+el8.9.0+19644+d68f775d"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python39-rpm-macros","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.9.20-1.module+el8.10.0+22342+478c159e"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python39-scipy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.4-5.module+el8.9.0+19644+d68f775d"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python39-scipy-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.4-5.module+el8.9.0+19644+d68f775d"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python39-setuptools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:50.3.2-6.module+el8.10.0+22183+c898c0c1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python39-setuptools-wheel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:50.3.2-6.module+el8.10.0+22183+c898c0c1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python39-six","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-3.module+el8.9.0+19644+d68f775d"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python39-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.9.20-1.module+el8.10.0+22342+478c159e"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python39-tkinter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.9.20-1.module+el8.10.0+22342+478c159e"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python39-toml","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.10.1-5.module+el8.9.0+19644+d68f775d"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python39-urllib3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.25.10-5.module+el8.10.0+20443+f0a692fe"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python39-wheel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:0.35.1-4.module+el8.9.0+19644+d68f775d"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python39-wheel-wheel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:0.35.1-4.module+el8.9.0+19644+d68f775d"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python3x-pip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:20.2.4-9.module+el8.10.0+21329+8d76b841"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python3x-setuptools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:50.3.2-6.module+el8.10.0+22183+c898c0c1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python3x-six","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-3.module+el8.9.0+19644+d68f775d"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"scipy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.4-5.module+el8.9.0+19644+d68f775d"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"scipy-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.4-5.module+el8.9.0+19644+d68f775d"}]}]},{"source":"osv","ecosystem":"Rocky Linux:8","package":"mod_wsgi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.7.1-7.module+el8.10.0+1582+bc278001"}]}]},{"source":"osv","ecosystem":"Rocky Linux:8","package":"mod_wsgi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.7.1-7.module+el8.10.0+1860+afcc1c71"}]}]},{"source":"osv","ecosystem":"Rocky Linux:8","package":"mod_wsgi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.7.1-7.module+el8.10.0+1978+d4f111ba.1"}]}]},{"source":"osv","ecosystem":"Rocky Linux:8","package":"numpy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.19.4-3.module+el8.10.0+1582+bc278001"}]}]},{"source":"osv","ecosystem":"Rocky Linux:8","package":"numpy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.19.4-3.module+el8.10.0+1860+afcc1c71"}]}]},{"source":"osv","ecosystem":"Rocky Linux:8","package":"python39","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.9.20-1.module+el8.10.0+1876+829fd4e0"}]}]},{"source":"osv","ecosystem":"Rocky Linux:8","package":"python3x-pip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:20.2.4-9.module+el8.10.0+1721+e52d6351"}]}]},{"source":"osv","ecosystem":"Rocky Linux:8","package":"python3x-pip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:20.2.4-9.module+el8.10.0+1860+afcc1c71"}]}]},{"source":"osv","ecosystem":"Rocky Linux:8","package":"python3x-setuptools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:50.3.2-6.module+el8.10.0+1861+0f5e39ec"}]}]},{"source":"osv","ecosystem":"Rocky Linux:8","package":"python3x-six","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-3.module+el8.10.0+1860+afcc1c71"}]}]},{"source":"osv","ecosystem":"Rocky Linux:8","package":"python3x-six","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-3.module+el8.10.0+1582+bc278001"}]}]},{"source":"osv","ecosystem":"Rocky Linux:8","package":"python-cffi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.14.3-2.module+el8.10.0+1582+bc278001"}]}]},{"source":"osv","ecosystem":"Rocky Linux:8","package":"python-cffi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.14.3-2.module+el8.10.0+1860+afcc1c71"}]}]},{"source":"osv","ecosystem":"Rocky Linux:8","package":"python-chardet","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.4-19.module+el8.10.0+1582+bc278001"}]}]},{"source":"osv","ecosystem":"Rocky Linux:8","package":"python-chardet","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.4-19.module+el8.10.0+1860+afcc1c71"}]}]},{"source":"osv","ecosystem":"Rocky Linux:8","package":"python-chardet","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.4-19.module+el8.9.0+1418+f0d66789"}]}]},{"source":"osv","ecosystem":"Rocky Linux:8","package":"python-cryptography","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.1-3.module+el8.10.0+1697+7e517775"}]}]},{"source":"osv","ecosystem":"Rocky Linux:8","package":"python-cryptography","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.1-3.module+el8.10.0+1860+afcc1c71"}]}]},{"source":"osv","ecosystem":"Rocky Linux:8","package":"python-idna","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.10-4.module+el8.10.0+1809+41195054"}]}]},{"source":"osv","ecosystem":"Rocky Linux:8","package":"python-idna","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.10-4.module+el8.10.0+1860+afcc1c71"}]}]},{"source":"osv","ecosystem":"Rocky Linux:8","package":"python-lxml","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.6.5-1.module+el8.10.0+1582+bc278001"}]}]},{"source":"osv","ecosystem":"Rocky Linux:8","package":"python-ply","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11-10.module+el8.10.0+1582+bc278001"}]}]},{"source":"osv","ecosystem":"Rocky Linux:8","package":"python-ply","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11-10.module+el8.10.0+1860+afcc1c71"}]}]},{"source":"osv","ecosystem":"Rocky Linux:8","package":"python-ply","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11-10.module+el8.9.0+1418+f0d66789"}]}]},{"source":"osv","ecosystem":"Rocky Linux:8","package":"python-psutil","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.8.0-4.module+el8.9.0+1357+a3b80af7"}]}]},{"source":"osv","ecosystem":"Rocky Linux:8","package":"python-psycopg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.8.6-3.module+el8.10.0+1860+afcc1c71"}]}]},{"source":"osv","ecosystem":"Rocky Linux:8","package":"python-psycopg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.8.6-3.module+el8.10.0+1660+b5b6f004"}]}]},{"source":"osv","ecosystem":"Rocky Linux:8","package":"python-pycparser","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.20-3.module+el8.10.0+1582+bc278001"}]}]},{"source":"osv","ecosystem":"Rocky Linux:8","package":"python-pycparser","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.20-3.module+el8.10.0+1860+afcc1c71"}]}]},{"source":"osv","ecosystem":"Rocky Linux:8","package":"python-PyMySQL","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.10.1-2.module+el8.10.0+1592+61442852"}]}]},{"source":"osv","ecosystem":"Rocky Linux:8","package":"python-PyMySQL","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.10.1-2.module+el8.10.0+1860+afcc1c71"}]}]},{"source":"osv","ecosystem":"Rocky Linux:8","package":"python-PyMySQL","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.10.1-2.module+el8.10.0+1910+234ad790"}]}]},{"source":"osv","ecosystem":"Rocky Linux:8","package":"python-PyMySQL","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.10.1-2.module+el8.10.0+1582+bc278001"}]}]},{"source":"osv","ecosystem":"Rocky Linux:8","package":"python-pysocks","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.1-4.module+el8.10.0+1582+bc278001"}]}]},{"source":"osv","ecosystem":"Rocky Linux:8","package":"python-pysocks","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.1-4.module+el8.10.0+1860+afcc1c71"}]}]},{"source":"osv","ecosystem":"Rocky Linux:8","package":"python-pysocks","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.1-4.module+el8.9.0+1418+f0d66789"}]}]},{"source":"osv","ecosystem":"Rocky Linux:8","package":"python-requests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.25.0-3.module+el8.10.0+1582+bc278001"}]}]},{"source":"osv","ecosystem":"Rocky Linux:8","package":"python-requests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.25.0-3.module+el8.10.0+1860+afcc1c71"}]}]},{"source":"osv","ecosystem":"Rocky Linux:8","package":"python-toml","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.10.1-5.module+el8.9.0+1332+dd574197"}]}]},{"source":"osv","ecosystem":"Rocky Linux:8","package":"python-urllib3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.25.10-5.module+el8.10.0+1860+afcc1c71"}]}]},{"source":"osv","ecosystem":"Rocky Linux:8","package":"python-urllib3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.25.10-5.module+el8.10.0+1545+03246da9"}]}]},{"source":"osv","ecosystem":"Rocky Linux:8","package":"python-wheel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:0.35.1-4.module+el8.10.0+1582+bc278001"}]}]},{"source":"osv","ecosystem":"Rocky Linux:8","package":"python-wheel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:0.35.1-4.module+el8.10.0+1860+afcc1c71"}]}]},{"source":"osv","ecosystem":"Rocky Linux:8","package":"PyYAML","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.1-1.module+el8.10.0+1582+bc278001"}]}]},{"source":"osv","ecosystem":"Rocky Linux:8","package":"PyYAML","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.1-1.module+el8.10.0+1860+afcc1c71"}]}]},{"source":"osv","ecosystem":"Rocky Linux:8","package":"PyYAML","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.1-1.module+el8.9.0+1418+f0d66789"}]}]},{"source":"osv","ecosystem":"Rocky Linux:8","package":"scipy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.4-5.module+el8.10.0+1582+bc278001"}]}]},{"source":"osv","ecosystem":"Rocky Linux:8","package":"scipy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.4-5.module+el8.10.0+1860+afcc1c71"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP4","package":"apache2-mod_wsgi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.7.1-150400.3.3.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"apache2-mod_wsgi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.7.1-150400.3.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"apache2-mod_wsgi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.13-3.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"apache2-mod_wsgi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.13-3.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"apache2-mod_wsgi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.13-3.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 12","package":"apache2-mod_wsgi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.13-3.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Web and Scripting 12","package":"apache2-mod_wsgi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.13-3.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP1","package":"apache2-mod_wsgi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.5.18-150000.4.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP2","package":"apache2-mod_wsgi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.5.18-150000.4.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP3","package":"apache2-mod_wsgi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.5.18-150000.4.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Proxy Module 4.1","package":"apache2-mod_wsgi-python3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.5.18-150000.4.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Proxy Module 4.2","package":"apache2-mod_wsgi-python3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.5.18-150000.4.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Proxy Module 4.3","package":"apache2-mod_wsgi-python3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.5.18-150000.4.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Server Applications 15 SP3","package":"apache2-mod_wsgi-python3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.5.18-150000.4.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Server Applications 15 SP4","package":"apache2-mod_wsgi-python3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.5.18-150000.4.6.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.3","package":"apache2-mod_wsgi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.5.18-150000.4.6.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.3","package":"apache2-mod_wsgi-python3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.5.18-150000.4.6.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"apache2-mod_wsgi-python3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.5.18-150000.4.6.1"}]}]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"mod-wsgi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.5.17-1ubuntu1.1"}]}],"versions":["4.5.17-1","4.5.17-1ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"mod-wsgi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.6.8-1ubuntu3.1"}]}],"versions":["4.6.5-1","4.6.8-0ubuntu1","4.6.8-1","4.6.8-1build1","4.6.8-1ubuntu1","4.6.8-1ubuntu2","4.6.8-1ubuntu3"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"mod-wsgi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.0-1ubuntu0.1"}]}],"versions":["4.7.1-3build2","4.9.0-1","4.9.0-1build1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"mod-wsgi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.5.17-1ubuntu1.1"}]}],"versions":["4.5.17-1","4.5.17-1ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"mod-wsgi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.6.8-1ubuntu3.1"}]}],"versions":["4.6.5-1","4.6.8-0ubuntu1","4.6.8-1","4.6.8-1build1","4.6.8-1ubuntu1","4.6.8-1ubuntu2","4.6.8-1ubuntu3"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"mod-wsgi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.0-1ubuntu0.1"}]}],"versions":["4.7.1-3build2","4.9.0-1","4.9.0-1build1"]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"apache2-mod_wsgi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.4-1.1"}]}]}],"products":[{"vendor":"debian","product":"debian_linux"},{"vendor":"mod_wsgi","product":"mod_wsgi"},{"vendor":"modwsgi","product":"mod_wsgi"}],"references":[{"url":"https://modwsgi.readthedocs.io/en/latest/release-notes/version-4.9.3.html","tags":["x_refsource_MISC","x_transferred","Release Notes","Third Party Advisory","advisory","web","article"]},{"url":"https://github.com/GrahamDumpleton/mod_wsgi/blob/4.9.2/src/server/mod_wsgi.c#L13940-L13941","tags":["x_refsource_MISC","x_transferred","Exploit","Third Party Advisory","advisory","web"]},{"url":"https://github.com/GrahamDumpleton/mod_wsgi/blob/4.9.2/src/server/mod_wsgi.c#L14046-L14082","tags":["x_refsource_MISC","x_transferred","Exploit","Third Party Advisory","advisory","web"]},{"url":"https://lists.debian.org/debian-lts-announce/2022/09/msg00021.html","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","Third Party Advisory","advisory","article","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-2255","tags":["web","advisory"]},{"url":"https://github.com/GrahamDumpleton/mod_wsgi/commit/af3c0c2736bc0b0b01fa0f0aad3c904b7fa9c751","tags":["web"]},{"url":"https://github.com/pypa/advisory-database/tree/main/vulns/mod-wsgi/PYSEC-2022-254.yaml","tags":["web"]},{"url":"https://github.com/advisories/GHSA-7527-8855-9cf8","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:4791","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-2255","tags":["report"]},{"url":"https://bugzilla.redhat.com/2100563","tags":["report"]},{"url":"https://errata.almalinux.org/8/ALSA-2025-4791.html","tags":["advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/2xxx/CVE-2022-2255.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2022-2255","tags":["advisory"]},{"url":"https://github.com/GrahamDumpleton/mod_wsgi","tags":["package"]},{"url":"https://advisories.mageia.org/MGASA-2022-0289.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=30711","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-5551-1","tags":["advisory"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2022-1827","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2100563","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_4791.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-2255","tags":["advisory","report"]},{"url":"https://errata.rockylinux.org/RLSA-2025:4791","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20224010-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1201634","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2022-2255","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20224013-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20224488-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2022-2255","tags":["report"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2022-2255","description":"A vulnerability was found in mod_wsgi. The X-Client-IP header is not removed from a request from an untrusted proxy, allowing an attacker to pass the X-Client-IP header to the target WSGI application because the condition to remove it is missing.","status":"published","published":"2022-08-25T17:26:19Z","modified":"2024-08-03T00:32:09.572Z","cwes":["CWE-348"],"updated_at":"2026-11-02T14:34:32.495407Z"}],"euvd":[{"id":"EUVD-2022-0159","description":"A vulnerability was found in mod_wsgi. The X-Client-IP header is not removed from a request from an untrusted proxy, allowing an attacker to pass the X-Client-IP header to the target WSGI application because the condition to remove it is missing.","status":"published","published":"2022-08-25T17:26:19Z","modified":"2024-08-03T00:32:09Z","updated_at":"2026-11-03T03:25:58.940602Z"}],"ghsa":[{"id":"GHSA-7527-8855-9cf8","title":"Incorrect header handling in mod-wsgi","description":"A vulnerability was found in mod_wsgi. The X-Client-IP header is not removed from a request from an untrusted proxy, allowing an attacker to pass the X-Client-IP header to the target WSGI application because the condition to remove it is missing.","status":"published","published":"2022-08-26T00:03:30Z","modified":"2024-09-25T20:02:58Z","cvss":[{"version":"4.0","score":8.7,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N","level":"high"},{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"high"}],"cwes":["CWE-345"],"updated_at":"2026-11-02T14:38:06.29677Z"}],"nvd":[{"id":"CVE-2022-2255","description":"A vulnerability was found in mod_wsgi. The X-Client-IP header is not removed from a request from an untrusted proxy, allowing an attacker to pass the X-Client-IP header to the target WSGI application because the condition to remove it is missing.","status":"published","published":"2022-08-25T18:15:09.993Z","modified":"2026-06-17T04:41:34.243Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"high","assessor":"primary"}],"cwes":["CWE-348","CWE-345"],"updated_at":"2026-11-02T14:07:25.883929Z"}],"osv":[{"id":"AZL-10734","title":"CVE-2022-2255 affecting package mod_wsgi for versions less than 4.9.3-2","description":"A vulnerability was found in mod_wsgi. The X-Client-IP header is not removed from a request from an untrusted proxy, allowing an attacker to pass the X-Client-IP header to the target WSGI application because the condition to remove it is missing.","status":"published","published":"2022-08-25T18:15:09Z","modified":"2026-04-21T04:21:24.98967Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:28:01.408755Z"},{"id":"DEBIAN-CVE-2022-2255","description":"A vulnerability was found in mod_wsgi. The X-Client-IP header is not removed from a request from an untrusted proxy, allowing an attacker to pass the X-Client-IP header to the target WSGI application because the condition to remove it is missing.","status":"published","published":"2022-08-25T18:15:09.993Z","modified":"2026-11-03T08:02:38.483321451Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"high"}],"updated_at":"2026-11-03T08:24:39.643572Z"},{"id":"GHSA-7527-8855-9cf8","title":"Incorrect header handling in mod-wsgi","description":"A vulnerability was found in mod_wsgi. The X-Client-IP header is not removed from a request from an untrusted proxy, allowing an attacker to pass the X-Client-IP header to the target WSGI application because the condition to remove it is missing.","status":"published","published":"2022-08-26T00:03:30Z","modified":"2024-09-25T20:23:43.629378Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"high"},{"version":"4.0","score":8.7,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N","level":"high"}],"cwes":["CWE-345"],"updated_at":"2026-11-02T15:46:40.657155Z"},{"id":"OESA-2022-1827","title":"mod_wsgi security update","description":"The mod_wsgi adapter is an Apache module that provides a WSGI compliant interface for hosting Python based web applications within Apache. The adapter is written completely in C code against the Apache C runtime andfor hosting WSGI applications within Apache has a lower overhead than using existing WSGI adapters for mod_python or CGI.\r\n\r\nSecurity Fix(es):\r\n\r\nA vulnerability was found in mod_wsgi. The X-Client-IP header is not removed from a request from an untrusted proxy (trusted proxies are configured via the WSGITrustedProxies directive) allowing an attacker to pass the X-Client-IP header to the target WSGI application because the condition to remove it is missing.\r\n\r\nReferences:\nhttps://github.com/GrahamDumpleton/mod_wsgi/blob/4.9.2/src/server/mod_wsgi.c#L13940-L13941\nhttps://github.com/GrahamDumpleton/mod_wsgi/blob/4.9.2/src/server/mod_wsgi.c#L14046-L14082(CVE-2022-2255)","status":"published","published":"2022-08-13T11:05:06Z","modified":"2026-08-18T01:17:07.199034428Z","cvss":[{"version":"3.1","score":5.6,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","level":"medium"}],"updated_at":"2026-11-02T15:52:39.528805Z"},{"id":"RHSA-2025:4791","title":"Red Hat Security Advisory: python39:3.9 security update","status":"published","published":"2025-05-13T10:04:53Z","modified":"2026-03-18T11:30:48.995395Z","cvss":[{"version":"3.1","score":7.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","level":"high"}],"updated_at":"2026-11-02T15:53:17.133041Z"},{"id":"RLSA-2025:4791","title":"Moderate: python39:3.9 security update","description":"Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.\n\nSecurity Fix(es):\n\n* mod_wsgi: Trusted Proxy Headers Removing Bypass (CVE-2022-2255)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2025-07-29T13:38:41.630147Z","modified":"2025-07-29T15:00:08.275512Z","cvss":[{"version":"3.1","score":7.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","level":"high"}],"updated_at":"2026-11-02T15:53:25.216873Z"},{"id":"UBUNTU-CVE-2022-2255","description":"A vulnerability was found in mod_wsgi. The X-Client-IP header is not removed from a request from an untrusted proxy, allowing an attacker to pass the X-Client-IP header to the target WSGI application because the condition to remove it is missing.","status":"published","published":"2022-07-22T14:01:00Z","modified":"2026-02-04T02:17:09.011355Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T16:53:52.391598Z"},{"id":"ALSA-2025:4791","title":"Moderate: python39:3.9 security update","description":"Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.  \n\nSecurity Fix(es):  \n\n  * mod_wsgi: Trusted Proxy Headers Removing Bypass (CVE-2022-2255)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2025-05-12T00:00:00Z","modified":"2026-10-29T11:02:23.105037274Z","updated_at":"2026-11-02T15:27:53.448565Z"},{"id":"BIT-mod_wsgi-2022-2255","description":"A vulnerability was found in mod_wsgi. The X-Client-IP header is not removed from a request from an untrusted proxy, allowing an attacker to pass the X-Client-IP header to the target WSGI application because the condition to remove it is missing.","status":"published","published":"2024-03-06T10:56:14.075Z","modified":"2026-09-08T08:48:13.667716558Z","updated_at":"2026-11-02T15:28:33.072289Z"},{"id":"CVE-2022-2255","description":"A vulnerability was found in mod_wsgi. The X-Client-IP header is not removed from a request from an untrusted proxy, allowing an attacker to pass the X-Client-IP header to the target WSGI application because the condition to remove it is missing.","status":"published","published":"2022-08-25T17:26:19Z","modified":"2026-10-28T02:30:39.907671585Z","cwes":["CWE-348"],"updated_at":"2026-11-02T15:44:24.061177Z"},{"id":"DLA-3111-1","title":"mod-wsgi - security update","status":"published","published":"2022-09-15T00:00:00Z","modified":"2026-03-09T01:23:14.914929Z","updated_at":"2026-11-02T15:46:11.189256Z"},{"id":"MGASA-2022-0289","title":"Updated apache-mod_wsgi packages fix security vulnerability","description":"It was discovered that mod-wsgi did not correctly remove the X-Client-IP\nheader when processing requests from untrusted proxies. A remote attacker\ncould use this issue to pass the header to WSGI applications, contrary to\nexpectations (CVE-2022-2255).\n","status":"published","published":"2022-08-20T10:04:13Z","modified":"2026-04-16T04:41:35.300243589Z","updated_at":"2026-11-02T15:49:42.263076Z"},{"id":"openSUSE-SU-2024:12535-1","title":"apache2-mod_wsgi-4.9.4-1.1 on GA media","description":"These are all security issues fixed in the apache2-mod_wsgi-4.9.4-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T04:25:39.183959Z","updated_at":"2026-11-02T16:58:35.751245Z"},{"id":"PYSEC-2022-254","description":"A vulnerability was found in mod_wsgi. The X-Client-IP header is not removed from a request from an untrusted proxy, allowing an attacker to pass the X-Client-IP header to the target WSGI application because the condition to remove it is missing.","status":"published","published":"2022-08-25T18:15:00Z","modified":"2023-12-06T01:01:57.5497Z","updated_at":"2026-11-02T15:52:53.449407Z"},{"id":"SUSE-SU-2022:4010-1","title":"Security update for apache2-mod_wsgi","description":"This update for apache2-mod_wsgi fixes the following issues:\n\n- CVE-2022-2255: Hardened the trusted proxy header filter to avoid bypass. (bsc#1201634)\n","status":"published","published":"2022-11-16T10:07:42Z","modified":"2026-02-04T04:00:15.330483Z","updated_at":"2026-11-02T15:53:51.440565Z"},{"id":"SUSE-SU-2022:4013-1","title":"Security update for apache2-mod_wsgi","description":"This update for apache2-mod_wsgi fixes the following issues:\n\n- CVE-2022-2255: Hardened the trusted proxy header filter to avoid bypass. (bsc#1201634)\n","status":"published","published":"2022-11-16T11:35:58Z","modified":"2025-05-02T04:32:42.575376Z","updated_at":"2026-11-02T15:53:51.440565Z"},{"id":"SUSE-SU-2022:4488-1","title":"Security update for apache2-mod_wsgi","description":"This update for apache2-mod_wsgi fixes the following issues:\n\n- CVE-2022-2255: Hardened the trusted proxy header filter to avoid bypass. (bsc#1201634)\n","status":"published","published":"2022-12-14T12:23:42Z","modified":"2025-05-02T04:32:42.637684Z","updated_at":"2026-11-02T15:53:51.853735Z"},{"id":"USN-5551-1","title":"mod-wsgi vulnerability","description":"It was discovered that mod-wsgi did not correctly remove the X-Client-IP\nheader when processing requests from untrusted proxies. A remote attacker\ncould use this issue to pass the header to WSGI applications, contrary\nto expectations.\n","status":"published","published":"2022-08-04T16:17:14Z","modified":"2026-02-10T04:42:43Z","updated_at":"2026-11-02T16:58:16.20937Z"}]}}