{"action":"Upgrade security-framework to 0.1.12 or later.","affected":[{"fixed":"0.1.12","introduced":"0.0.0-0"}],"component":"security-framework","cve_ids":["CVE-2017-18588"],"ecosystem":"crates.io","epss":0.00654,"exploited":false,"fixed_versions":["0.1.12"],"ghsa_id":"GHSA-jqqr-c2r2-9cvr","id":"tcs_01M5KF534FDTTSZNGZ9FJYBE65","modified_at":"2023-11-08T03:59:16.345668Z","published_at":"2017-03-15T12:00:00Z","references":["https://osv.dev/vulnerability/RUSTSEC-2017-0003","https://crates.io/crates/security-framework","https://rustsec.org/advisories/RUSTSEC-2017-0003.html","https://github.com/sfackler/rust-security-framework/pull/27"],"severity":{"label":"medium","score":5.3},"sources":[{"source":"osv","source_id":"RUSTSEC-2017-0003","url":"https://osv.dev/vulnerability/RUSTSEC-2017-0003"}],"summary":"Hostname verification skipped when custom root certs used"}