{"action":"Upgrade openssl-src to 300.0.6 or later.","affected":[{"fixed":"300.0.6","introduced":"300.0.0"}],"component":"openssl-src","cve_ids":["CVE-2022-1343"],"ecosystem":"crates.io","epss":0.02141,"exploited":false,"fixed_versions":["300.0.6"],"ghsa_id":"GHSA-mfm6-r9g2-q4r7","id":"tcs_01M5KF1NT3VAHNX87GAC9B8ZG6","modified_at":"2026-09-10T03:49:34.719762234Z","published_at":"2022-05-04T00:00:23Z","references":["https://osv.dev/vulnerability/GHSA-mfm6-r9g2-q4r7","https://nvd.nist.gov/vuln/detail/CVE-2022-1343","https://github.com/github/advisory-database/issues/405","https://cert-portal.siemens.com/productcert/pdf/ssa-953464.pdf","https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2eda98790c5c2741d76d23cc1e74b0dc4f4b391a","https://rustsec.org/advisories/RUSTSEC-2022-0027.html","https://security.netapp.com/advisory/ntap-20220602-0009","https://www.openssl.org/news/secadv/20220503.txt"],"severity":{"label":"medium","score":5.3},"sources":[{"source":"osv","source_id":"GHSA-mfm6-r9g2-q4r7","url":"https://osv.dev/vulnerability/GHSA-mfm6-r9g2-q4r7"}],"summary":"`OCSP_basic_verify` may incorrectly verify the response signing certificate"}