{"action":"Upgrade openssl to 3.6.4-1 or later.","affected":[{"fixed":"3.6.4-1","introduced":"0"}],"component":"openssl","cve_ids":[],"ecosystem":"Debian","ecosystem_qualifier":"Debian:14","exploited":false,"fixed_versions":["3.6.4-1"],"id":"tcs_01M5NSZM6HP0C81H4A448N7H0X","modified_at":"2026-11-07T10:00:46.926549529Z","published_at":"2026-08-05T15:16:53.487Z","references":["https://osv.dev/vulnerability/DEBIAN-CVE-2026-54876","https://security-tracker.debian.org/tracker/CVE-2026-54876"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"DEBIAN-CVE-2026-54876","url":"https://osv.dev/vulnerability/DEBIAN-CVE-2026-54876"}],"summary":"Issue summary: A malicious TLS server can cause a memory leak in a TLS client that has enabled OCSP response checking by sending an OCSP response that contains no single response entries. Impact summa"}