{"action":"Upgrade qutebrowser to 1.11.0 or later.","affected":[{"fixed":"1.11.0","introduced":"0"}],"component":"qutebrowser","cve_ids":["CVE-2020-11054"],"ecosystem":"PyPI","epss":0.0151,"exploited":false,"fixed_versions":["1.11.0"],"ghsa_id":"GHSA-4rcq-jv2f-898j","id":"tcs_01M5KGAZXR0K6RDEE30SFAAH45","modified_at":"2023-11-08T04:02:04.149198Z","published_at":"2020-05-07T21:15:00Z","references":["https://osv.dev/vulnerability/PYSEC-2020-97","https://github.com/qutebrowser/qutebrowser/commit/19f01bb42d02da539446a52a25bb0c1232b86327","https://github.com/qutebrowser/qutebrowser/commit/4020210b193f77cf1785b21717f6ef7c5de5f0f8","https://github.com/qutebrowser/qutebrowser/commit/a45ca9c788f648d10cccce2af41405bf25ee2948","https://github.com/qutebrowser/qutebrowser/commit/021ab572a319ca3db5907a33a59774f502b3b975","https://github.com/qutebrowser/qutebrowser/commit/d28ed758d077a5bf19ddac4da468f7224114df23","https://github.com/qutebrowser/qutebrowser/commit/6821c236f9ae23adf21d46ce0d56768ac8d0c467","https://github.com/qutebrowser/qutebrowser/commit/9bd1cf585fccdfe8318fff7af793730e74a04db3","https://tracker.die-offenbachs.homelinux.org/eric/issue328","https://github.com/qutebrowser/qutebrowser/security/advisories/GHSA-4rcq-jv2f-898j","https://github.com/qutebrowser/qutebrowser/commit/f5d801251aa5436aff44660c87d7013e29ac5864","https://github.com/qutebrowser/qutebrowser/commit/2281a205c3e70ec20f35ec8fafecee0d5c4f3478","https://bugs.kde.org/show_bug.cgi?id=420902","https://github.com/qutebrowser/qutebrowser/issues/5403","https://github.com/qutebrowser/qutebrowser/commit/1b7946ed14b386a24db050f2d6dba81ba6518755","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7YWJ5QNHXKTGG5NLV7EGEOKPBVZBA5GS/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MKAZOOTJ2MBHTYVYQQ52NL53F5CB2XAP/"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"PYSEC-2020-97","url":"https://osv.dev/vulnerability/PYSEC-2020-97"}],"summary":"In qutebrowser versions less than 1.11.1, reloading a page with certificate errors shows a green URL. After a certificate error was overridden by the user, qutebrowser displays the URL as yellow (colo"}