{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"6.0"}],"component":"com.github.kevinsawicki:http-request","cve_ids":["CVE-2019-1010206"],"ecosystem":"Maven","epss":0.0057,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-8mx3-gp3p-vgg7","id":"tcs_01M5N8N3H83JFDJF0WH2GEV5NB","modified_at":"2024-02-16T08:01:28.931303Z","published_at":"2022-05-24T22:00:16Z","references":["https://osv.dev/vulnerability/GHSA-8mx3-gp3p-vgg7","https://nvd.nist.gov/vuln/detail/CVE-2019-1010206","https://github.com/kevinsawicki/http-request/blob/master/lib/src/main/java/com/github/kevinsawicki/http/HttpRequest.java"],"severity":{"label":"medium","score":5.9},"sources":[{"source":"osv","source_id":"GHSA-8mx3-gp3p-vgg7","url":"https://osv.dev/vulnerability/GHSA-8mx3-gp3p-vgg7"}],"summary":"kevinsawicki/http-request Missing certificate validation"}