{"action":"Upgrade Azure.Identity to 1.11.0 or later.","affected":[{"fixed":"1.11.0","introduced":"0"}],"component":"Azure.Identity","cve_ids":["CVE-2024-29992"],"ecosystem":"NuGet","epss":0.00717,"exploited":false,"fixed_versions":["1.11.0"],"ghsa_id":"GHSA-wvxc-855f-jvrv","id":"tcs_01M5N94ET8N4B4ADV3F3QMRBQV","modified_at":"2024-04-11T20:11:43.329610Z","published_at":"2024-04-09T18:30:28Z","references":["https://osv.dev/vulnerability/GHSA-wvxc-855f-jvrv","https://nvd.nist.gov/vuln/detail/CVE-2024-29992","https://github.com/Azure/azure-sdk-for-net","https://github.com/Azure/azure-sdk-for-net/blob/main/sdk/identity/Azure.Identity/CHANGELOG.md#1110-2024-04-09","https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-29992"],"severity":{"label":"medium","score":5.5},"sources":[{"source":"osv","source_id":"GHSA-wvxc-855f-jvrv","url":"https://osv.dev/vulnerability/GHSA-wvxc-855f-jvrv"}],"summary":"Azure Identity Library for .NET Information Disclosure Vulnerability"}