{"action":"Upgrade Microsoft.NETCore.UniversalWindowsPlatform to 5.2.4 (5.2.x), 5.3.5 (5.3.x), 5.4.2 (5.4.x) or 6.0.6 (6.0.x) or later.","affected":[{"fixed":"5.2.4","introduced":"5.2.0"},{"fixed":"5.3.5","introduced":"5.3.0"},{"fixed":"5.4.2","introduced":"5.4.0"},{"fixed":"6.0.6","introduced":"6.0.0"}],"component":"Microsoft.NETCore.UniversalWindowsPlatform","cve_ids":["CVE-2018-0786"],"ecosystem":"NuGet","epss":0.03687,"exploited":false,"fixed_versions":["5.2.4","5.3.5","5.4.2","6.0.6"],"ghsa_id":"GHSA-jc8g-xhw5-6x46","id":"tcs_01M5N8SCRQJ2XSJ40WH53D32NM","modified_at":"2023-11-08T03:59:31.030847Z","published_at":"2018-10-16T19:59:05Z","references":["https://osv.dev/vulnerability/GHSA-jc8g-xhw5-6x46","https://nvd.nist.gov/vuln/detail/CVE-2018-0786","https://github.com/dotnet/announcements/issues/51","https://github.com/github/advisory-database/issues/302","https://github.com/advisories/GHSA-jc8g-xhw5-6x46","https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0786","https://www.nuget.org/packages/System.ServiceModel.Duplex#versions-body-tab"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-jc8g-xhw5-6x46","url":"https://osv.dev/vulnerability/GHSA-jc8g-xhw5-6x46"}],"summary":"Improper Certificate Validation in Microsoft .NET Framework components"}