{"action":"Upgrade openssl-src to 300.0.6 or later.","affected":[{"fixed":"300.0.6","introduced":"300.0.0"}],"component":"openssl-src","cve_ids":["CVE-2022-1434"],"ecosystem":"crates.io","epss":0.01228,"exploited":false,"fixed_versions":["300.0.6"],"ghsa_id":"GHSA-638m-m8mh-7gw2","id":"tcs_01M5KETCY1MNFV8B0E2WGA038K","modified_at":"2026-09-10T03:49:37.851891420Z","published_at":"2022-05-04T00:00:22Z","references":["https://osv.dev/vulnerability/GHSA-638m-m8mh-7gw2","https://nvd.nist.gov/vuln/detail/CVE-2022-1434","https://github.com/github/advisory-database/issues/405","https://cert-portal.siemens.com/productcert/pdf/ssa-953464.pdf","https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=7d56a74a96828985db7354a55227a511615f732b","https://rustsec.org/advisories/RUSTSEC-2022-0026.html","https://security.netapp.com/advisory/ntap-20220602-0009","https://www.openssl.org/news/secadv/20220503.txt"],"severity":{"label":"medium","score":5.9},"sources":[{"source":"osv","source_id":"GHSA-638m-m8mh-7gw2","url":"https://osv.dev/vulnerability/GHSA-638m-m8mh-7gw2"}],"summary":"Incorrect MAC key used in the RC4-MD5 ciphersuite"}