{"action":"Upgrade Microsoft.Bot.Connector to 4.6.4 (4.6.x), 4.7.3 (4.7.x), 4.8.2 (4.8.x), 4.9.5 (4.9.x) or 4.10.3 (4.10.x) or later.","affected":[{"fixed":"4.6.4","introduced":"4.6.0"},{"fixed":"4.7.3","introduced":"4.7.0"},{"fixed":"4.8.2","introduced":"4.8.0"},{"fixed":"4.9.5","introduced":"4.9.0"},{"fixed":"4.10.3","introduced":"4.10.0"}],"component":"Microsoft.Bot.Connector","cve_ids":[],"ecosystem":"NuGet","exploited":false,"fixed_versions":["4.6.4","4.7.3","4.8.2","4.9.5","4.10.3"],"ghsa_id":"GHSA-qxx8-292g-2w66","id":"tcs_01M5N8Z8ATEMVW3V4AERQC5YEF","modified_at":"2024-12-02T05:46:45.665548Z","published_at":"2021-03-08T15:50:01Z","references":["https://osv.dev/vulnerability/GHSA-qxx8-292g-2w66","https://github.com/microsoft/botbuilder-dotnet/security/advisories/GHSA-qxx8-292g-2w66","https://aka.ms/SkillClaimsValidationDotnet","https://www.nuget.org/packages/Microsoft.Bot.Connector"],"severity":{"label":"high"},"sources":[{"source":"osv","source_id":"GHSA-qxx8-292g-2w66","url":"https://osv.dev/vulnerability/GHSA-qxx8-292g-2w66"}],"summary":"Improper Authentication"}