{"action":"Upgrade System.ServiceModel.NetTcp to 4.1.1 (4.1.x), 4.3.1 (4.3.x) or 4.4.1 (4.4.x) or later.","affected":[{"fixed":"4.4.1","introduced":"4.4.0"},{"fixed":"4.3.1","introduced":"4.3.0"},{"fixed":"4.1.1","introduced":"4.1.0"}],"component":"System.ServiceModel.NetTcp","cve_ids":["CVE-2018-0786"],"ecosystem":"NuGet","exploited":false,"fixed_versions":["4.4.1","4.3.1","4.1.1"],"ghsa_id":"GHSA-jc8g-xhw5-6x46","id":"tcs_01M5N8SDCJMQ1EGMWPSQM4WWDM","modified_at":"2023-11-08T03:59:31.030847Z","published_at":"2018-10-16T19:59:05Z","references":["https://osv.dev/vulnerability/GHSA-jc8g-xhw5-6x46","https://nvd.nist.gov/vuln/detail/CVE-2018-0786","https://github.com/dotnet/announcements/issues/51","https://github.com/github/advisory-database/issues/302","https://github.com/advisories/GHSA-jc8g-xhw5-6x46","https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0786","https://www.nuget.org/packages/System.ServiceModel.Duplex#versions-body-tab"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-jc8g-xhw5-6x46#NuGet/System.ServiceModel.NetTcp","url":"https://osv.dev/vulnerability/GHSA-jc8g-xhw5-6x46"}],"summary":"Improper Certificate Validation in Microsoft .NET Framework components"}