{"action":"Upgrade jsrsasign to 8.0.18 or later.","affected":[{"fixed":"8.0.18","introduced":"0"}],"component":"jsrsasign","cve_ids":["CVE-2020-14967"],"ecosystem":"npm","epss":0.0227,"exploited":false,"fixed_versions":["8.0.18"],"ghsa_id":"GHSA-xxxq-chmp-67g4","id":"tcs_01M5KGK9GGQ8AZKYD20TECTBJX","modified_at":"2023-11-08T04:02:28.135196Z","published_at":"2020-06-26T16:27:08Z","references":["https://osv.dev/vulnerability/GHSA-xxxq-chmp-67g4","https://github.com/kjur/jsrsasign/security/advisories/GHSA-xxxq-chmp-67g4","https://nvd.nist.gov/vuln/detail/CVE-2020-14967","https://github.com/kjur/jsrsasign/issues/439","https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14967","https://github.com/kjur/jsrsasign","https://github.com/kjur/jsrsasign/releases/tag/8.0.17","https://github.com/kjur/jsrsasign/releases/tag/8.0.18","https://kjur.github.io/jsrsasign","https://kjur.github.io/jsrsasign/api/symbols/KJUR.crypto.Cipher.html#.decrypt","https://security.netapp.com/advisory/ntap-20200724-0001","https://vuldb.com/?id.157124","https://www.npmjs.com/package/jsrsasign"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-xxxq-chmp-67g4","url":"https://osv.dev/vulnerability/GHSA-xxxq-chmp-67g4"}],"summary":"RSA PKCS#1 decryption vulnerability with prepending zeros in jsrsasign"}