{"action":"Upgrade openssl-src to 300.0.6 or later.","affected":[{"fixed":"300.0.6","introduced":"300.0.0"}],"component":"openssl-src","cve_ids":["CVE-2022-1473"],"ecosystem":"crates.io","epss":0.04678,"exploited":false,"fixed_versions":["300.0.6"],"ghsa_id":"GHSA-g323-fr93-4j3c","id":"tcs_01M5KF7S23CK58WBFSQE4RPYNB","modified_at":"2023-11-08T04:07:49.486512Z","published_at":"2022-05-03T12:00:00Z","references":["https://osv.dev/vulnerability/RUSTSEC-2022-0025","https://crates.io/crates/openssl-src","https://rustsec.org/advisories/RUSTSEC-2022-0025.html","https://www.openssl.org/news/secadv/20220503.txt"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"RUSTSEC-2022-0025","url":"https://osv.dev/vulnerability/RUSTSEC-2022-0025"}],"summary":"Resource leakage when decoding certificates and keys"}