{"action":"Upgrade indy-node to 1.12.4 or later.","affected":[{"fixed":"1.12.4","introduced":"0"}],"component":"indy-node","cve_ids":["CVE-2020-11093"],"ecosystem":"PyPI","epss":0.01183,"exploited":false,"fixed_versions":["1.12.4"],"ghsa_id":"GHSA-wh2w-39f4-rpv2","id":"tcs_01M5KGAPGEHABFSZTN991JZQMF","modified_at":"2023-11-08T04:02:05.552505Z","published_at":"2020-12-24T20:15:00Z","references":["https://osv.dev/vulnerability/PYSEC-2020-48","https://github.com/hyperledger/indy-node/security/advisories/GHSA-wh2w-39f4-rpv2","https://github.com/hyperledger/indy-node/blob/master/CHANGELOG.md#1124","https://github.com/hyperledger/indy-node/blob/master/docs/source/auth_rules.md","https://github.com/hyperledger/indy-node/commit/55056f22c83b7c3520488b615e1577e0f895d75a"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"PYSEC-2020-48","url":"https://osv.dev/vulnerability/PYSEC-2020-48"}],"summary":"Hyperledger Indy Node is the server portion of a distributed ledger purpose-built for decentralized identity. In Hyperledger Indy before version 1.12.4, there is lack of signature verification on a sp"}