{"action":"Upgrade phpseclib/phpseclib to 1.0.22 or later.","affected":[{"fixed":"1.0.22","introduced":"0"},{"fixed":"2.0.46","introduced":"2.0.0"},{"fixed":"3.0.33","introduced":"3.0.0"}],"component":"phpseclib/phpseclib","cve_ids":["CVE-2023-52892"],"ecosystem":"Packagist","epss":0.00376,"exploited":false,"fixed_versions":["1.0.22","2.0.46","3.0.33"],"ghsa_id":"GHSA-ff7q-6vwh-v9m4","id":"tcs_01M5KF1QWD9DH03S0WGR535357","modified_at":"2024-06-28T19:13:30.745817Z","published_at":"2024-06-28T00:33:31Z","references":["https://osv.dev/vulnerability/GHSA-ff7q-6vwh-v9m4","https://nvd.nist.gov/vuln/detail/CVE-2023-52892","https://github.com/phpseclib/phpseclib/issues/1943","https://github.com/phpseclib/phpseclib/commit/6cd6e8ceab9f2b55c8cd81d2192bf98cbeaf4627","https://github.com/phpseclib/phpseclib","https://github.com/phpseclib/phpseclib/releases/tag/3.0.33","https://github.com/x509-name-testing/name_testing_artifacts"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-ff7q-6vwh-v9m4","url":"https://osv.dev/vulnerability/GHSA-ff7q-6vwh-v9m4"}],"summary":"Name confusion in x509 Subject Alternative Name fields"}