{"action":"Upgrade recurly-api-client to 1.0.1 (1.0.x), 1.1.10 (1.1.x), 1.2.8 (1.2.x), 1.3.2 (1.3.x), 1.4.14 (1.4.x), 1.5.3 (1.5.x), 1.6.2 (1.6.x), 1.7.1 (1.7.x) or 1.8.1 (1.8.x) or later.","affected":[{"fixed":"1.0.1","introduced":"0"},{"fixed":"1.1.10","introduced":"1.1.0"},{"fixed":"1.2.8","introduced":"1.2.0"},{"fixed":"1.3.2","introduced":"1.3.0"},{"fixed":"1.4.14","introduced":"1.4.0"},{"fixed":"1.5.3","introduced":"1.5.0"},{"fixed":"1.6.2","introduced":"1.6.0"},{"fixed":"1.7.1","introduced":"1.7.0"},{"fixed":"1.8.1","introduced":"1.8.0"}],"component":"recurly-api-client","cve_ids":["CVE-2017-0907"],"ecosystem":"NuGet","epss":0.02594,"exploited":false,"fixed_versions":["1.0.1","1.1.10","1.2.8","1.3.2","1.4.14","1.5.3","1.6.2","1.7.1","1.8.1"],"ghsa_id":"GHSA-xpwp-rq3x-x6v7","id":"tcs_01M5N95NYNQ3G6RXET0FT2JRMC","modified_at":"2024-12-02T05:48:02.886912Z","published_at":"2018-10-16T17:35:04Z","references":["https://osv.dev/vulnerability/GHSA-xpwp-rq3x-x6v7","https://nvd.nist.gov/vuln/detail/CVE-2017-0907","https://github.com/recurly/recurly-client-net/commit/9eef460c0084afd5c24d66220c8b7a381cf9a1f1","https://hackerone.com/reports/288635","https://dev.recurly.com/page/net-updates","https://github.com/advisories/GHSA-xpwp-rq3x-x6v7"],"severity":{"label":"critical"},"sources":[{"source":"osv","source_id":"GHSA-xpwp-rq3x-x6v7","url":"https://osv.dev/vulnerability/GHSA-xpwp-rq3x-x6v7"}],"summary":"Critical severity vulnerability that affects recurly-api-client"}