{"action":"Upgrade scalyr-agent-2 to 2.1.10 or later.","affected":[{"fixed":"2.1.10","introduced":"0"}],"component":"scalyr-agent-2","cve_ids":["CVE-2020-24714"],"ecosystem":"PyPI","epss":0.00959,"exploited":false,"fixed_versions":["2.1.10"],"ghsa_id":"GHSA-w6xv-mf6f-r5f6","id":"tcs_01M5KGA229R37F16F8NN5DC7MP","modified_at":"2026-06-10T17:02:41.355922753Z","published_at":"2020-08-27T22:15:00Z","references":["https://osv.dev/vulnerability/PYSEC-2020-251","https://scalyr-static.s3.amazonaws.com/technical-details/index.html","https://github.com/advisories/GHSA-w6xv-mf6f-r5f6"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"PYSEC-2020-251","url":"https://osv.dev/vulnerability/PYSEC-2020-251"}],"summary":"The Scalyr Agent before 2.1.10 has Missing SSL Certificate Validation because, in some circumstances, the openssl binary is called without the -verify_hostname option."}