{"action":"Upgrade openssl to 0.10.48 or later.","affected":[{"fixed":"0.10.48","introduced":"0.9.7"}],"component":"openssl","cve_ids":[],"ecosystem":"crates.io","exploited":false,"fixed_versions":["0.10.48"],"ghsa_id":"GHSA-6hcf-g6gr-hhcr","id":"tcs_01M5KETPRTFHACJ84KZC7EWBKN","modified_at":"2023-11-08T04:16:17.438606Z","published_at":"2023-03-24T22:01:23Z","references":["https://osv.dev/vulnerability/GHSA-6hcf-g6gr-hhcr","https://github.com/sfackler/rust-openssl/pull/1854","https://github.com/sfackler/rust-openssl","https://rustsec.org/advisories/RUSTSEC-2023-0024.html"],"severity":{"label":"high"},"sources":[{"source":"osv","source_id":"GHSA-6hcf-g6gr-hhcr","url":"https://osv.dev/vulnerability/GHSA-6hcf-g6gr-hhcr"}],"summary":"`openssl` `X509Extension::new` and `X509Extension::new_nid` null pointer dereference"}