{"action":"Upgrade openssl3 to 1.1.1d-r1 or later.","affected":[{"fixed":"1.1.1d-r1","introduced":"0"}],"component":"openssl3","cve_ids":[],"ecosystem":"Alpine","ecosystem_qualifier":"Alpine:v3.15","exploited":false,"fixed_versions":["1.1.1d-r1"],"id":"tcs_01M5NBEFG5WBDZATDG6P90PBHT","modified_at":"2026-09-21T06:17:52.493412617Z","published_at":"2019-09-10T17:15:11.890Z","references":["https://osv.dev/vulnerability/ALPINE-CVE-2019-1563","https://security.alpinelinux.org/vuln/CVE-2019-1563"],"severity":{"label":"low","score":3.7},"sources":[{"source":"osv","source_id":"ALPINE-CVE-2019-1563#Alpine:v3.15/openssl3","url":"https://osv.dev/vulnerability/ALPINE-CVE-2019-1563"}],"summary":"In situations where an attacker receives automated notification of the success or failure of a decryption attempt an attacker, after sending a very large number of messages to be decrypted, can recove"}