{"action":"Upgrade mellium.im/xmpp to 0.21.1 or later.","affected":[{"fixed":"0.21.1","introduced":"0.18.0"}],"component":"mellium.im/xmpp","cve_ids":["CVE-2022-24968"],"ecosystem":"Go","epss":0.00539,"exploited":false,"fixed_versions":["0.21.1"],"ghsa_id":"GHSA-h289-x5wc-xcv8","id":"tcs_01M5KFBPT82EDR5NPAD76NJDJZ","modified_at":"2024-05-20T21:13:34Z","published_at":"2022-02-16T22:56:21Z","references":["https://osv.dev/vulnerability/GHSA-h289-x5wc-xcv8","https://github.com/mellium/xmpp/security/advisories/GHSA-h289-x5wc-xcv8","https://nvd.nist.gov/vuln/detail/CVE-2022-24968","https://github.com/mellium/xmpp/pull/260","https://github.com/mellium/xmpp/commit/0d92aa486da69b71f2f4a30e62aa722c711b98ac","https://github.com/mellium/xmpp","https://mellium.im/cve/cve-2022-24968","https://mellium.im/issue/259","https://pkg.go.dev/vuln/GO-2022-0370"],"severity":{"label":"medium","score":5.9},"sources":[{"source":"osv","source_id":"GHSA-h289-x5wc-xcv8","url":"https://osv.dev/vulnerability/GHSA-h289-x5wc-xcv8"}],"summary":"Improper Validation of Certificate with Host Mismatch in mellium.im/xmpp/websocket"}