{"action":"Upgrade tenvoy to 7.0.3 or later.","affected":[{"fixed":"7.0.3","introduced":"0"}],"component":"tenvoy","cve_ids":["CVE-2021-32685"],"ecosystem":"npm","epss":0.00658,"exploited":false,"fixed_versions":["7.0.3"],"ghsa_id":"GHSA-7r96-8g3x-g36m","id":"tcs_01M5KFATKWTN550V86D115EHX0","modified_at":"2026-07-08T06:27:47.022376222Z","published_at":"2021-06-28T17:16:56Z","references":["https://osv.dev/vulnerability/GHSA-7r96-8g3x-g36m","https://github.com/TogaTech/tEnvoy/security/advisories/GHSA-7r96-8g3x-g36m","https://nvd.nist.gov/vuln/detail/CVE-2021-32685","https://github.com/TogaTech/tEnvoy/commit/a121b34a45e289d775c62e58841522891dee686b","https://github.com/TogaTech/tEnvoy","https://github.com/TogaTech/tEnvoy/releases/tag/v7.0.3"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-7r96-8g3x-g36m","url":"https://osv.dev/vulnerability/GHSA-7r96-8g3x-g36m"}],"summary":"Improper Verification of Cryptographic Signature"}