{"action":"Upgrade org.apache.jena:jena-core to 4.2.0 or later.","affected":[{"fixed":"4.2.0","introduced":"0"}],"component":"org.apache.jena:jena-core","cve_ids":["CVE-2021-39239"],"ecosystem":"Maven","epss":0.04342,"exploited":false,"fixed_versions":["4.2.0"],"ghsa_id":"GHSA-7rp6-w7mg-h8rw","id":"tcs_01M5N8K4F8S7C730MYGMAJTYN4","modified_at":"2024-12-02T05:35:42.838509Z","published_at":"2021-09-20T20:22:05Z","references":["https://osv.dev/vulnerability/GHSA-7rp6-w7mg-h8rw","https://nvd.nist.gov/vuln/detail/CVE-2021-39239","https://gitbox.apache.org/repos/asf?p=jena.git","https://lists.apache.org/thread.html/r0f03ae7e102c3e8587fdd36531fc167309335738156dfbd7d9c1bf45@%3Cdev.jena.apache.org%3E","https://lists.apache.org/thread.html/rce5241b228a1f0e5880f6b2bfdb7ae9ee420e94cb692738a0bbfed9d@%3Cdev.jena.apache.org%3E","https://lists.apache.org/thread.html/rf44d529c54ef1d0097e813f576a0823a727e1669a9f610d3221d493d%40%3Cusers.jena.apache.org%3E","https://lists.apache.org/thread.html/rf44d529c54ef1d0097e813f576a0823a727e1669a9f610d3221d493d@%3Cannounce.apache.org%3E"],"severity":{"label":"high"},"sources":[{"source":"osv","source_id":"GHSA-7rp6-w7mg-h8rw","url":"https://osv.dev/vulnerability/GHSA-7rp6-w7mg-h8rw"}],"summary":"XML External Entity Reference in Apache Jena"}