{"action":"Upgrade org.apache.karaf:karaf to 4.2.3 or later.","affected":[{"fixed":"4.2.3","introduced":"0"}],"component":"org.apache.karaf:karaf","cve_ids":["CVE-2019-0191"],"ecosystem":"Maven","epss":0.04858,"exploited":false,"fixed_versions":["4.2.3"],"ghsa_id":"GHSA-869j-5855-hjpm","id":"tcs_01M5N8M0QPZB9TR0MAVXASJXDM","modified_at":"2023-11-08T04:00:30.677048Z","published_at":"2019-03-25T16:16:44Z","references":["https://osv.dev/vulnerability/GHSA-869j-5855-hjpm","https://nvd.nist.gov/vuln/detail/CVE-2019-0191","https://github.com/advisories/GHSA-869j-5855-hjpm","https://lists.apache.org/thread.html/6856aa7ed7dd805eaf65d0e5e95027dda3b2307aacd1ab4a838c5cd1@%3Cuser.karaf.apache.org%3E","https://lists.apache.org/thread.html/cef9a2d4b547625e5214684283ac5c59c9d9740e092e777dc3f85070@%3Ccommits.karaf.apache.org%3E","http://www.securityfocus.com/bid/107462"],"severity":{"label":"medium","score":6.5},"sources":[{"source":"osv","source_id":"GHSA-869j-5855-hjpm","url":"https://osv.dev/vulnerability/GHSA-869j-5855-hjpm"}],"summary":"Moderate severity vulnerability that affects org.apache.karaf:apache-karaf and org.apache.karaf:karaf"}