{"action":"Upgrade openssl to 0.10.9 or later.","affected":[{"fixed":"0.10.9","introduced":"0.10.8"}],"component":"openssl","cve_ids":["CVE-2018-20997"],"ecosystem":"crates.io","epss":0.01744,"exploited":false,"fixed_versions":["0.10.9"],"ghsa_id":"GHSA-xjxc-vfw2-cg96","id":"tcs_01M5KF564BEH8F83RKV9XK1KPB","modified_at":"2023-11-08T04:00:13.741614Z","published_at":"2018-06-01T12:00:00Z","references":["https://osv.dev/vulnerability/RUSTSEC-2018-0010","https://crates.io/crates/openssl","https://rustsec.org/advisories/RUSTSEC-2018-0010.html","https://github.com/sfackler/rust-openssl/pull/942"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"RUSTSEC-2018-0010","url":"https://osv.dev/vulnerability/RUSTSEC-2018-0010"}],"summary":"Use after free in CMS Signing"}