{"action":"Upgrade scalyr-agent-2 to 2.1.10 or later.","affected":[{"fixed":"2.1.10","introduced":"0"}],"component":"scalyr-agent-2","cve_ids":["CVE-2020-24715"],"ecosystem":"PyPI","epss":0.00765,"exploited":false,"fixed_versions":["2.1.10"],"ghsa_id":"GHSA-738x-v49g-p6hx","id":"tcs_01M5KGA27DSK4W98EYXS1FBSW9","modified_at":"2026-06-10T17:02:41.318005080Z","published_at":"2020-08-27T22:15:00Z","references":["https://osv.dev/vulnerability/PYSEC-2020-252","https://scalyr-static.s3.amazonaws.com/technical-details/index.html","https://github.com/advisories/GHSA-738x-v49g-p6hx"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"PYSEC-2020-252","url":"https://osv.dev/vulnerability/PYSEC-2020-252"}],"summary":"The Scalyr Agent before 2.1.10 has Missing SSL Certificate Validation because, in some circumstances, native Python code is used that lacks a comparison of the hostname to commonName and subjectAltNam"}