{"action":"Upgrade json2xml to 3.14.0 or later.","affected":[{"fixed":"3.14.0","introduced":"0"}],"component":"json2xml","cve_ids":["CVE-2022-25024"],"ecosystem":"PyPI","epss":0.0131,"exploited":false,"fixed_versions":["3.14.0"],"ghsa_id":"GHSA-8rj5-2857-877j","id":"tcs_01M5KF91H7EZ16YZM0S1KV9R9H","modified_at":"2025-02-18T05:44:32.826857Z","published_at":"2023-08-23T13:19:55Z","references":["https://osv.dev/vulnerability/GHSA-8rj5-2857-877j","https://nvd.nist.gov/vuln/detail/CVE-2022-25024","https://github.com/vinitkumar/json2xml/issues/106","https://github.com/vinitkumar/json2xml/pull/107","https://github.com/vinitkumar/json2xml/pull/107/files","https://github.com/vinitkumar/json2xml/commit/a9cd75b61329801b47a8fba7473bce6c85a38b9b","https://github.com/pypa/advisory-database/tree/main/vulns/json2xml/PYSEC-2023-149.yaml","https://github.com/vinitkumar/json2xml","https://packaging.python.org/en/latest/guides/analyzing-pypi-package-downloads"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-8rj5-2857-877j","url":"https://osv.dev/vulnerability/GHSA-8rj5-2857-877j"}],"summary":"json2xml Uncaught Exception vulnerability"}