{"action":"Upgrade io.jenkins.plugins:shared-library-version-override to 19.v3a or later.","affected":[{"fixed":"19.v3a","introduced":"0"}],"component":"io.jenkins.plugins:shared-library-version-override","cve_ids":["CVE-2024-52554"],"ecosystem":"Maven","epss":0.00515,"exploited":false,"fixed_versions":["19.v3a"],"ghsa_id":"GHSA-7845-crfj-phc4","id":"tcs_01M5N8HVF91GMCD2084WHX4TE5","modified_at":"2024-11-14T16:57:29.977264Z","published_at":"2024-11-13T21:30:38Z","references":["https://osv.dev/vulnerability/GHSA-7845-crfj-phc4","https://nvd.nist.gov/vuln/detail/CVE-2024-52554","https://github.com/jenkinsci/shared-library-version-override-plugin","https://www.jenkins.io/security/advisory/2024-11-13/#SECURITY-3466"],"severity":{"label":"high","score":8.8},"sources":[{"source":"osv","source_id":"GHSA-7845-crfj-phc4","url":"https://osv.dev/vulnerability/GHSA-7845-crfj-phc4"}],"summary":"Script security bypass vulnerability in Jenkins Shared Library Version Override Plugin"}