{"action":"Upgrade DNS to 7.0.0 or later.","affected":[{"fixed":"7.0.0","introduced":"0"}],"component":"DNS","cve_ids":["CVE-2021-4248"],"ecosystem":"NuGet","epss":0.00815,"exploited":false,"fixed_versions":["7.0.0"],"ghsa_id":"GHSA-g3wc-xv93-445q","id":"tcs_01M5N8NKQRYHRX0TP61XSCC9M8","modified_at":"2023-11-08T04:07:06.393334Z","published_at":"2022-12-18T12:30:20Z","references":["https://osv.dev/vulnerability/GHSA-g3wc-xv93-445q","https://nvd.nist.gov/vuln/detail/CVE-2021-4248","https://github.com/kapetan/dns/pull/88","https://github.com/kapetan/dns/commit/cf7105aa2aae90d6656088fe5a8ee1d5730773b6","https://github.com/kapetan/dns","https://github.com/kapetan/dns/releases/tag/v7.0.0","https://vuldb.com/?id.216188"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-g3wc-xv93-445q","url":"https://osv.dev/vulnerability/GHSA-g3wc-xv93-445q"}],"summary":"DNS NuGet package uses insufficiently random values"}