{"action":"Upgrade busybox to 1.28.3-r2 or later.","affected":[{"fixed":"1.28.3-r2","introduced":"0"}],"component":"busybox","cve_ids":[],"ecosystem":"Alpine","ecosystem_qualifier":"Alpine:v3.18","exploited":false,"fixed_versions":["1.28.3-r2"],"id":"tcs_01M5N9ZVRGBTMHDRR9M1VZ289P","modified_at":"2026-10-23T17:17:55.156547076Z","published_at":"2018-06-26T16:29:00.353Z","references":["https://osv.dev/vulnerability/ALPINE-CVE-2018-1000500","https://security.alpinelinux.org/vuln/CVE-2018-1000500"],"severity":{"label":"high","score":8.1},"sources":[{"source":"osv","source_id":"ALPINE-CVE-2018-1000500#Alpine:v3.18/busybox","url":"https://osv.dev/vulnerability/ALPINE-CVE-2018-1000500"}],"summary":"Busybox contains a Missing SSL certificate validation vulnerability in The \"busybox wget\" applet that can result in arbitrary code execution. This attack appear to be exploitable via Simply download a"}