{"action":"Upgrade globalpayments/php-sdk to 2.0.0 or later.","affected":[{"fixed":"2.0.0","introduced":"0"}],"component":"globalpayments/php-sdk","cve_ids":["CVE-2019-20455"],"ecosystem":"Packagist","epss":0.00976,"exploited":false,"fixed_versions":["2.0.0"],"ghsa_id":"GHSA-pm77-c4q7-3fwj","id":"tcs_01M5KF6GHJS874PTPK9WX2MADH","modified_at":"2024-02-17T05:26:24.182590Z","published_at":"2021-10-12T16:31:12Z","references":["https://osv.dev/vulnerability/GHSA-pm77-c4q7-3fwj","https://nvd.nist.gov/vuln/detail/CVE-2019-20455","https://github.com/globalpayments/php-sdk/pull/8","https://github.com/globalpayments/php-sdk/pull/8/commits/c86e18f28c5eba0d6ede7d557756d978ea83d3c9","https://github.com/globalpayments/php-sdk","https://github.com/globalpayments/php-sdk/compare/1.3.3...2.0.0","https://github.com/globalpayments/php-sdk/releases/tag/2.0.0","https://winterdragon.ca/global-payments-vulnerability"],"severity":{"label":"medium","score":5.9},"sources":[{"source":"osv","source_id":"GHSA-pm77-c4q7-3fwj","url":"https://osv.dev/vulnerability/GHSA-pm77-c4q7-3fwj"}],"summary":"Improper Certificate Validation in Heartland & Global Payments PHP SDK"}