{"action":"Upgrade github.com/mongodb/mongo-tools to 0.0.0-20200819165540-8c1800b51550 or later.","affected":[{"introduced":"0"}],"component":"github.com/mongodb/mongo-tools","cve_ids":["CVE-2020-7924"],"ecosystem":"Go","epss":0.00743,"exploited":false,"fixed_versions":["0.0.0-20200819165540-8c1800b51550"],"ghsa_id":"GHSA-6cwm-wm82-hgrw","id":"tcs_01M5KG1DH46KEAAA3TW3R63P5C","modified_at":"2024-07-09T19:33:56Z","published_at":"2024-06-28T15:28:53Z","references":["https://osv.dev/vulnerability/GO-2024-2550","https://github.com/advisories/GHSA-6cwm-wm82-hgrw","https://github.com/mongodb/mongo-tools/commit/8c1800b5155084f954a39a1f2f259efac3bb86de","https://jira.mongodb.org/browse/TOOLS-2587"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"GO-2024-2550","url":"https://osv.dev/vulnerability/GO-2024-2550"}],"summary":"MongoDB Tools Improper Certificate Validation vulnerability in github.com/mongodb/mongo-tools"}