{"action":"Upgrade github.com/mongodb/mongo-tools to 100.2.0 or later.","affected":[{"fixed":"100.2.0","introduced":"100.0.0"}],"component":"github.com/mongodb/mongo-tools","cve_ids":["CVE-2020-7924"],"ecosystem":"Go","epss":0.00743,"exploited":false,"fixed_versions":["100.2.0"],"ghsa_id":"GHSA-6cwm-wm82-hgrw","id":"tcs_01M5KF00M13HETTKD7R2ATTW8W","modified_at":"2024-07-03T21:05:45Z","published_at":"2022-05-24T17:47:06Z","references":["https://osv.dev/vulnerability/GHSA-6cwm-wm82-hgrw","https://nvd.nist.gov/vuln/detail/CVE-2020-7924","https://github.com/mongodb/mongo-tools/commit/8c1800b5155084f954a39a1f2f259efac3bb86de","https://github.com/advisories/GHSA-6cwm-wm82-hgrw","https://github.com/mongodb/mongo-tools","https://jira.mongodb.org/browse/TOOLS-2587"],"severity":{"label":"medium","score":6.5},"sources":[{"source":"osv","source_id":"GHSA-6cwm-wm82-hgrw","url":"https://osv.dev/vulnerability/GHSA-6cwm-wm82-hgrw"}],"summary":"MongoDB Tools Improper Certificate Validation vulnerability"}