{"action":"Upgrade stdlib to 1.13.13 or later.","affected":[{"fixed":"1.13.13","introduced":"0"},{"fixed":"1.14.5","introduced":"1.14.0-0"}],"component":"stdlib","cve_ids":["CVE-2020-14039"],"ecosystem":"Go","epss":0.01762,"exploited":false,"fixed_versions":["1.13.13","1.14.5"],"id":"tcs_01M5KFTKVCDC57GBKHYJ9MQXTE","modified_at":"2024-05-20T16:03:47Z","published_at":"2022-02-17T17:46:03Z","references":["https://osv.dev/vulnerability/GO-2021-0223","https://go.dev/cl/242597","https://go.googlesource.com/go/+/82175e699a2e2cd83d3aa34949e9b922d66d52f5","https://go.dev/issue/39360","https://groups.google.com/g/golang-announce/c/XZNfaiwgt2w"],"severity":{"label":"medium","score":5.3},"sources":[{"source":"osv","source_id":"GO-2021-0223","url":"https://osv.dev/vulnerability/GO-2021-0223"},{"source":"nvd","source_id":"CVE-2020-14039","url":"https://nvd.nist.gov/vuln/detail/CVE-2020-14039"}],"summary":"Certificate verification error on Windows in crypto/x509"}