{"action":"Upgrade com.azure:azure-security-keyvault-keys to 4.10.6 or later.","affected":[{"fixed":"4.10.6","introduced":"0"}],"component":"com.azure:azure-security-keyvault-keys","cve_ids":["CVE-2026-33117"],"ecosystem":"Maven","epss":0.0048,"exploited":false,"fixed_versions":["4.10.6"],"ghsa_id":"GHSA-97jf-46m3-8953","id":"tcs_01M5N8PF13HV3ET0ZA5AYF0YJM","modified_at":"2026-09-10T03:51:05.221484298Z","published_at":"2026-05-12T18:30:42Z","references":["https://osv.dev/vulnerability/GHSA-97jf-46m3-8953","https://nvd.nist.gov/vuln/detail/CVE-2026-33117","https://github.com/Azure/azure-sdk-for-java/pull/48476","https://github.com/Azure/azure-sdk-for-java/commit/1b5c5c79d85a5c9a9cfd07f6cdff6fd0f50eccf9","https://github.com/Azure/azure-sdk-for-java","https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-33117"],"severity":{"label":"critical","score":9.1},"sources":[{"source":"osv","source_id":"GHSA-97jf-46m3-8953","url":"https://osv.dev/vulnerability/GHSA-97jf-46m3-8953"}],"summary":"Security feature bypass vulnerability in Azure Key Vault Keys library for Java"}