{"action":"Upgrade com.google.crypto.tink:tink to 1.5.0 or later.","affected":[{"fixed":"1.5.0","introduced":"0"}],"component":"com.google.crypto.tink:tink","cve_ids":["CVE-2020-8929"],"ecosystem":"Maven","epss":0.00463,"exploited":false,"fixed_versions":["1.5.0"],"ghsa_id":"GHSA-g5vf-v6wf-7w2r","id":"tcs_01M5N8XF9XY7CBESS92VEVMKZK","modified_at":"2026-07-08T06:00:03.145975600Z","published_at":"2020-10-16T00:51:24Z","references":["https://osv.dev/vulnerability/GHSA-g5vf-v6wf-7w2r","https://github.com/google/tink/security/advisories/GHSA-g5vf-v6wf-7w2r","https://nvd.nist.gov/vuln/detail/CVE-2020-8929","https://github.com/google/tink/commit/93d839a5865b9d950dffdc9d0bc99b71280a8899","https://github.com/pypa/advisory-database/tree/main/vulns/tink/PYSEC-2020-142.yaml"],"severity":{"label":"medium","score":5.3},"sources":[{"source":"osv","source_id":"GHSA-g5vf-v6wf-7w2r","url":"https://osv.dev/vulnerability/GHSA-g5vf-v6wf-7w2r"}],"summary":"Ciphertext Malleability Issue in Tink Java"}