{"action":"Upgrade OPCFoundation.NetStandard.Opc.Ua.Core to 1.4.365.10 or later.","affected":[{"fixed":"1.4.365.10","introduced":"0"}],"component":"OPCFoundation.NetStandard.Opc.Ua.Core","cve_ids":["CVE-2020-29457"],"ecosystem":"NuGet","epss":0.00311,"exploited":false,"fixed_versions":["1.4.365.10"],"ghsa_id":"GHSA-mjww-934m-h4jw","id":"tcs_01M5N8TX26WR8KQBFHHMXAVSZ7","modified_at":"2024-02-22T05:33:30.362772Z","published_at":"2021-11-19T20:19:53Z","references":["https://osv.dev/vulnerability/GHSA-mjww-934m-h4jw","https://nvd.nist.gov/vuln/detail/CVE-2020-29457","https://github.com/OPCFoundation/UA-.NETStandard/pull/1229","https://github.com/OPCFoundation/UA-.NETStandard/pull/1229/commits/d815cfb972bd668c1b6e461f6ff97519d6b26f25","https://github.com/OPCFoundation/UA-.NETStandard","https://opcfoundation.org/SecurityBulletins/OPC%20Foundation%20Security%20Bulletin%20CVE-2020-29457.pdf","https://www.nuget.org/packages/OPCFoundation.NetStandard.Opc.Ua"],"severity":{"label":"medium","score":4.4},"sources":[{"source":"osv","source_id":"GHSA-mjww-934m-h4jw","url":"https://osv.dev/vulnerability/GHSA-mjww-934m-h4jw"}],"summary":"Improper Certificate Validation in OPCFoundation.NetStandard.Opc.Ua.Core"}