{"action":"Upgrade com.microsoft.azure:azure-eventhubs to 3.2.1 or later.","affected":[{"fixed":"3.2.1","introduced":"0"}],"component":"com.microsoft.azure:azure-eventhubs","cve_ids":["CVE-2020-16971"],"ecosystem":"Maven","epss":0.04266,"exploited":false,"fixed_versions":["3.2.1"],"ghsa_id":"GHSA-8q69-pw39-hpqh","id":"tcs_01M5N8N6PV5FZD92483F4B55CQ","modified_at":"2026-09-10T03:49:31.906526701Z","published_at":"2022-05-24T17:35:51Z","references":["https://osv.dev/vulnerability/GHSA-8q69-pw39-hpqh","https://nvd.nist.gov/vuln/detail/CVE-2020-16971","https://azure.github.io/azure-sdk/releases/2020-10/index.html","https://azure.github.io/azure-sdk/releases/2020-10/java.html","https://msrc.microsoft.com/update-guide/vulnerability/CVE-2020-16971","https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-16971"],"severity":{"label":"high","score":7.4},"sources":[{"source":"osv","source_id":"GHSA-8q69-pw39-hpqh","url":"https://osv.dev/vulnerability/GHSA-8q69-pw39-hpqh"}],"summary":"Azure SDK for Java Security Feature Bypass Vulnerability"}