{"action":"Upgrade openssl-src to 300.0.6 or later.","affected":[{"fixed":"300.0.6","introduced":"300.0.0"}],"component":"openssl-src","cve_ids":["CVE-2022-1473"],"ecosystem":"crates.io","epss":0.04678,"exploited":false,"fixed_versions":["300.0.6"],"ghsa_id":"GHSA-g323-fr93-4j3c","id":"tcs_01M5KEXQREZ100NKHE7GR1ZR8A","modified_at":"2026-09-10T03:49:33.365456090Z","published_at":"2022-05-04T00:00:22Z","references":["https://osv.dev/vulnerability/GHSA-g323-fr93-4j3c","https://nvd.nist.gov/vuln/detail/CVE-2022-1473","https://github.com/github/advisory-database/issues/405","https://cert-portal.siemens.com/productcert/pdf/ssa-953464.pdf","https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=64c85430f95200b6b51fe9475bd5203f7c19daf1","https://rustsec.org/advisories/RUSTSEC-2022-0025.html","https://security.gentoo.org/glsa/202210-02","https://security.netapp.com/advisory/ntap-20220602-0009","https://www.openssl.org/news/secadv/20220503.txt"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-g323-fr93-4j3c","url":"https://osv.dev/vulnerability/GHSA-g323-fr93-4j3c"}],"summary":"Resource leakage when decoding certificates and keys"}