{"action":"Upgrade com.github.samtools:htsjdk to 3.0.1 or later.","affected":[{"fixed":"3.0.1","introduced":"0"}],"component":"com.github.samtools:htsjdk","cve_ids":["CVE-2022-21126"],"ecosystem":"Maven","epss":0.00747,"exploited":false,"fixed_versions":["3.0.1"],"ghsa_id":"GHSA-96vh-4rfp-c42c","id":"tcs_01M5N8PCTQ52F47X34T6GVSCSR","modified_at":"2023-11-08T04:08:04.039802Z","published_at":"2022-11-29T18:30:18Z","references":["https://osv.dev/vulnerability/GHSA-96vh-4rfp-c42c","https://nvd.nist.gov/vuln/detail/CVE-2022-21126","https://github.com/samtools/htsjdk/pull/1617","https://github.com/samtools/htsjdk/commit/4a4024a97ee3e87096df6ad9b22c8260bd527772","https://github.com/samtools/htsjdk","https://security.snyk.io/vuln/SNYK-JAVA-COMGITHUBSAMTOOLS-3149901"],"severity":{"label":"high","score":7.8},"sources":[{"source":"osv","source_id":"GHSA-96vh-4rfp-c42c","url":"https://osv.dev/vulnerability/GHSA-96vh-4rfp-c42c"}],"summary":"HTSJDK is vulnerable to exposure of resource(s) to the wrong sphere"}