{"action":"Upgrade openssl-src to 111.14.0 or later.","affected":[{"fixed":"111.14.0","introduced":"0.0.0-0"}],"component":"openssl-src","cve_ids":["CVE-2021-23840"],"ecosystem":"crates.io","epss":0.50732,"exploited":false,"fixed_versions":["111.14.0"],"ghsa_id":"GHSA-qgm6-9472-pwq7","id":"tcs_01M5KF708329ST8FKDM6CE36FE","modified_at":"2024-12-16T15:27:07.565493Z","published_at":"2021-05-01T12:00:00Z","references":["https://osv.dev/vulnerability/RUSTSEC-2021-0057","https://crates.io/crates/openssl-src","https://rustsec.org/advisories/RUSTSEC-2021-0057.html","https://www.openssl.org/news/secadv/20210216.txt"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"RUSTSEC-2021-0057","url":"https://osv.dev/vulnerability/RUSTSEC-2021-0057"}],"summary":"Integer overflow in CipherUpdate"}