{"action":"Upgrade security-framework to 0.1.12 or later.","affected":[{"fixed":"0.1.12","introduced":"0"}],"component":"security-framework","cve_ids":["CVE-2017-18588"],"ecosystem":"crates.io","epss":0.00654,"exploited":false,"fixed_versions":["0.1.12"],"ghsa_id":"GHSA-jqqr-c2r2-9cvr","id":"tcs_01M5KF17FFXZ1KR0ATP5417AFQ","modified_at":"2023-11-08T03:59:16.345668Z","published_at":"2021-08-25T20:42:59Z","references":["https://osv.dev/vulnerability/GHSA-jqqr-c2r2-9cvr","https://nvd.nist.gov/vuln/detail/CVE-2017-18588","https://github.com/sfackler/rust-security-framework/pull/27","https://github.com/sfackler/rust-security-framework","https://rustsec.org/advisories/RUSTSEC-2017-0003.html"],"severity":{"label":"medium","score":5.3},"sources":[{"source":"osv","source_id":"GHSA-jqqr-c2r2-9cvr","url":"https://osv.dev/vulnerability/GHSA-jqqr-c2r2-9cvr"}],"summary":"Improper Certificate Validation in security-framework"}