{"id":"CGA-3fwg-c3m8-gxcp","modified":"2026-11-05T02:38:29.352415088Z","published":"2026-10-28T21:25:28Z","upstream":["CVE-2020-1968","GHSA-mh8f-5gw2-5wgh"],"references":[{"type":"ADVISORY","url":"https://lists.debian.org/debian-lts-announce/2020/09/msg00016.html"},{"type":"ADVISORY","url":"https://security.gentoo.org/glsa/202210-02"},{"type":"ADVISORY","url":"https://security.netapp.com/advisory/ntap-20200911-0004/"},{"type":"ADVISORY","url":"https://usn.ubuntu.com/4504-1/"},{"type":"ADVISORY","url":"https://www.openssl.org/news/secadv/20200909.txt"},{"type":"ADVISORY","url":"https://www.oracle.com/security-alerts/cpujan2021.html"},{"type":"FIX","url":"https://www.oracle.com//security-alerts/cpujul2021.html"},{"type":"FIX","url":"https://www.oracle.com/security-alerts/cpuApr2021.html"},{"type":"FIX","url":"https://www.oracle.com/security-alerts/cpuapr2022.html"},{"type":"FIX","url":"https://www.oracle.com/security-alerts/cpuoct2021.html"}],"affected":[{"package":{"name":"eco-dotnet-libssl-1.0-ld-so-conf","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/eco-dotnet-libssl-1.0-ld-so-conf?arch=x86_64"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"ecosystem_specific":{"components":[{"latest_event_status":"pending_upstream_fix","latest_event_timestamp":"2026-10-28T21:25:40Z","component_name":"eco-dotnet-libssl-1.0-ld-so-conf","component_version":"1.0.2u-r0","component_type":"apk","component_location":"/.PKGINFO","component_purl":"pkg:apk/eco-dotnet-libssl-1.0-ld-so-conf@1.0.2u-r0"}]},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-3fwg-c3m8-gxcp.json","chainguard":{"applies_to_subpackages":false}}}],"schema_version":"1.9.2","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N"}]}