{"action":"Upgrade async-nats to 0.29.0 or later.","affected":[{"fixed":"0.29.0","introduced":"0.0.0-0"}],"component":"async-nats","cve_ids":[],"ecosystem":"crates.io","exploited":false,"fixed_versions":["0.29.0"],"ghsa_id":"GHSA-f5v5-ccqc-6w36","id":"tcs_01M5KF8D8HVPPM9N5KRNWBC44F","modified_at":"2023-11-08T04:18:50.210490Z","published_at":"2023-03-24T12:00:00Z","references":["https://osv.dev/vulnerability/RUSTSEC-2023-0027","https://crates.io/crates/async-nats","https://rustsec.org/advisories/RUSTSEC-2023-0027.html","https://github.com/nats-io/nats.rs/commit/817a7b942c462fa9d9938dcb62124173634132fb#diff-767d442397fcaaf2f83e8f924d4a70317a2ce4703a49964d6007707949cfa5f5L303-R304"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"RUSTSEC-2023-0027","url":"https://osv.dev/vulnerability/RUSTSEC-2023-0027"}],"summary":"TLS certificate common name validation bypass"}