{"action":"Upgrade nats to 0.24.1 or later.","affected":[{"fixed":"0.24.1","introduced":"0.9.0"}],"component":"nats","cve_ids":[],"ecosystem":"crates.io","exploited":false,"fixed_versions":["0.24.1"],"ghsa_id":"GHSA-wvc4-j7g5-4f79","id":"tcs_01M5KF48JJYX6VWPJS71CH3FFK","modified_at":"2023-11-08T04:24:00.164703Z","published_at":"2023-03-27T21:12:24Z","references":["https://osv.dev/vulnerability/GHSA-wvc4-j7g5-4f79","https://github.com/nats-io/nats.rs/pull/881","https://github.com/nats-io/nats.rs/pull/887","https://github.com/nats-io/nats.rs/commit/9bacb86a480803ece9d1a45aa443081cf1eb815c","https://github.com/nats-io/nats.rs","https://rustsec.org/advisories/RUSTSEC-2023-0029.html"],"severity":{"label":"medium"},"sources":[{"source":"osv","source_id":"GHSA-wvc4-j7g5-4f79","url":"https://osv.dev/vulnerability/GHSA-wvc4-j7g5-4f79"}],"summary":"NATS TLS certificate common name validation bypass"}