EPSS
Percentile
39.4%
FedMsg 0.18.1 and older is vulnerable to a message validation flaw resulting in message validation not being enabled if configured to be on.
github.com/advisories/GHSA-p7xc-35m8-57pr
github.com/fedora-infra/fedmsg
github.com/fedora-infra/fedmsg/blob/0.18.2/CHANGELOG.rst
nvd.nist.gov/vuln/detail/CVE-2017-1000001