{"action":"Upgrade org.apache.shiro:shiro-root to 1.11.0 or later.","affected":[{"fixed":"1.11.0","introduced":"0"}],"component":"org.apache.shiro:shiro-root","cve_ids":["CVE-2023-22602"],"ecosystem":"Maven","epss":0.01596,"exploited":false,"fixed_versions":["1.11.0"],"ghsa_id":"GHSA-7cxr-h8wm-fg4c","id":"tcs_01M5N8J75HCSQ714FXAT0PR55X","modified_at":"2024-02-16T08:23:48.417435Z","published_at":"2023-01-14T12:30:23Z","references":["https://osv.dev/vulnerability/GHSA-7cxr-h8wm-fg4c","https://nvd.nist.gov/vuln/detail/CVE-2023-22602","https://github.com/apache/shiro","https://lists.apache.org/thread/dzj0k2smpzzgj6g666hrbrgsrlf9yhkl"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-7cxr-h8wm-fg4c","url":"https://osv.dev/vulnerability/GHSA-7cxr-h8wm-fg4c"}],"summary":"Apache Shiro Interpretation Conflict vulnerability"}