{"action":"Upgrade qpid-proton to 0.22.0-1 or later.","affected":[{"fixed":"0.22.0-1","introduced":"0"}],"component":"qpid-proton","cve_ids":[],"ecosystem":"Debian","ecosystem_qualifier":"Debian:13","exploited":false,"fixed_versions":["0.22.0-1"],"id":"tcs_01M5ND5TDA6QNT9QJKEP7P5JTP","modified_at":"2026-10-23T18:03:20.505925070Z","published_at":"2018-11-13T15:29:00.313Z","references":["https://osv.dev/vulnerability/DEBIAN-CVE-2018-17187","https://security-tracker.debian.org/tracker/CVE-2018-17187"],"severity":{"label":"high","score":7.4},"sources":[{"source":"osv","source_id":"DEBIAN-CVE-2018-17187#Debian:13/qpid-proton","url":"https://osv.dev/vulnerability/DEBIAN-CVE-2018-17187"}],"summary":"The Apache Qpid Proton-J transport includes an optional wrapper layer to perform TLS, enabled by use of the 'transport.ssl(...)' methods. Unless a verification mode was explicitly configured, client a"}