Approved changes feed: RSS · Atom

cpe:2.3:a:networkgenomics:mitogen:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorNetworkgenomics (e9535602-c454-5426-82a0-09bfc08a0b17)
ProductMitogen (d416ca86-e3bc-5d0c-8a95-1f43b9c655a2)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:deb/debian/python-mitogen purl2cpe 2026-06-01 10:16:51.008246
pkg:deb/ubuntu/python-mitogen purl2cpe 2026-06-01 10:16:51.008249
pkg:github/mitogen-hq/mitogen purl2cpe 2026-06-01 10:16:51.008252
pkg:pypi/mitogen purl2cpe 2026-06-01 10:16:51.008255
pkg:rpm/fedora/python-mitogen purl2cpe 2026-06-01 10:16:51.008258
pkg:rpm/opensuse/python-mitogen purl2cpe 2026-06-01 10:16:51.008261

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2019-15149 vulnerable 2026-06-08 05:12:56.751355 Details available
core.py in Mitogen before 0.2.8 has a typo that drops the unidirectional-routing protection mechanism in the case of a child that is initiated by another child. The Ansible extension is unaffected. NOTE: the vendor disputes this issue because it is exploitable only in conjunction with hypothetical other factors, i.e., an affected use case within a library caller, and a bug in the message receiver policy code that led to reliance on this extra protection mechanism
Published: 2019-08-18T19:56:18.000Z
Updated: 2024-08-05T00:42:03.692Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.