{"action":"Upgrade openssl to 0.10.48 or later.","affected":[{"fixed":"0.10.48","introduced":"0.0.0-0"}],"component":"openssl","cve_ids":[],"ecosystem":"crates.io","exploited":false,"fixed_versions":["0.10.48"],"ghsa_id":"GHSA-9qwg-crg9-m2vc","id":"tcs_01M5KF8CQ9PJY6KWSVQWM275FD","modified_at":"2023-11-08T04:18:04.563523Z","published_at":"2023-03-24T12:00:00Z","references":["https://osv.dev/vulnerability/RUSTSEC-2023-0023","https://crates.io/crates/openssl","https://rustsec.org/advisories/RUSTSEC-2023-0023.html","https://github.com/sfackler/rust-openssl/pull/1854"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"RUSTSEC-2023-0023","url":"https://osv.dev/vulnerability/RUSTSEC-2023-0023"}],"summary":"`openssl` `SubjectAlternativeName` and `ExtendedKeyUsage::other` allow arbitrary file read"}