{"action":"Upgrade openssl to 0.10.48 or later.","affected":[{"fixed":"0.10.48","introduced":"0.9.7"}],"component":"openssl","cve_ids":[],"ecosystem":"crates.io","exploited":false,"fixed_versions":["0.10.48"],"ghsa_id":"GHSA-9qwg-crg9-m2vc","id":"tcs_01M5KEWJM8BXBRK5SJ674NT5ER","modified_at":"2023-11-08T04:18:04.563523Z","published_at":"2023-03-24T22:01:29Z","references":["https://osv.dev/vulnerability/GHSA-9qwg-crg9-m2vc","https://github.com/sfackler/rust-openssl/pull/1854","https://github.com/sfackler/rust-openssl","https://rustsec.org/advisories/RUSTSEC-2023-0023.html"],"severity":{"label":"high"},"sources":[{"source":"osv","source_id":"GHSA-9qwg-crg9-m2vc","url":"https://osv.dev/vulnerability/GHSA-9qwg-crg9-m2vc"}],"summary":"`openssl` `SubjectAlternativeName` and `ExtendedKeyUsage::other` allow arbitrary file read"}