{"action":"Upgrade org.codehaus.jettison:jettison to 1.5.2 or later.","affected":[{"fixed":"1.5.2","introduced":"0"}],"component":"org.codehaus.jettison:jettison","cve_ids":["CVE-2022-45685"],"ecosystem":"Maven","epss":0.01488,"exploited":false,"fixed_versions":["1.5.2"],"ghsa_id":"GHSA-7rf3-mqpx-h7xg","id":"tcs_01M5N8K394WMQJ3F20S00WS1YJ","modified_at":"2026-09-10T03:49:47.381549443Z","published_at":"2022-12-13T15:30:26Z","references":["https://osv.dev/vulnerability/GHSA-7rf3-mqpx-h7xg","https://nvd.nist.gov/vuln/detail/CVE-2022-45685","https://github.com/jettison-json/jettison/issues/54","https://github.com/jettison-json/jettison","https://lists.debian.org/debian-lts-announce/2022/12/msg00045.html","https://www.debian.org/security/2023/dsa-5312"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-7rf3-mqpx-h7xg","url":"https://osv.dev/vulnerability/GHSA-7rf3-mqpx-h7xg"}],"summary":"Jettison Out-of-bounds Write vulnerability"}