{"action":"Upgrade org.apache.heron:heron-api to 0.20.5-incubating or later.","affected":[{"fixed":"0.20.5-incubating","introduced":"0"}],"component":"org.apache.heron:heron-api","cve_ids":["CVE-2021-42010"],"ecosystem":"Maven","epss":0.0176,"exploited":false,"fixed_versions":["0.20.5-incubating"],"ghsa_id":"GHSA-95w5-q9vp-5vrm","id":"tcs_01M5N8P7PQG1MWB8FDMQBRSAHD","modified_at":"2024-02-16T08:17:51.474693Z","published_at":"2022-10-24T19:00:16Z","references":["https://osv.dev/vulnerability/GHSA-95w5-q9vp-5vrm","https://nvd.nist.gov/vuln/detail/CVE-2021-42010","https://lists.apache.org/thread/j65nwr8n7jchngwqptzh100drcr4ry2q","http://www.openwall.com/lists/oss-security/2022/10/23/2"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-95w5-q9vp-5vrm","url":"https://osv.dev/vulnerability/GHSA-95w5-q9vp-5vrm"}],"summary":"Heron allows CRLF log injection"}