{"action":"Upgrade com.alibaba.oneagent:one-java-agent-plugin to 0.0.2 or later.","affected":[{"fixed":"0.0.2","introduced":"0"}],"component":"com.alibaba.oneagent:one-java-agent-plugin","cve_ids":["CVE-2022-25842"],"ecosystem":"Maven","epss":0.03906,"exploited":false,"fixed_versions":["0.0.2"],"ghsa_id":"GHSA-9hr3-j9mc-xmq2","id":"tcs_01M5N8Q5D2JEKW2NQQ0ETX1H5D","modified_at":"2026-07-08T06:49:35.350210393Z","published_at":"2022-05-03T00:00:44Z","references":["https://osv.dev/vulnerability/GHSA-9hr3-j9mc-xmq2","https://nvd.nist.gov/vuln/detail/CVE-2022-25842","https://github.com/alibaba/one-java-agent/pull/29","https://github.com/alibaba/one-java-agent/pull/29/commits/359603b63fc6c59d8b57e061c171954bab3433bf","https://github.com/alibaba/one-java-agent/pull/29/commits/b5b437f9f4c8cbfe7bdbe266e975a4bd513c13fe","https://github.com/alibaba/one-java-agent","https://github.com/alibaba/one-java-agent/blob/1f399a2299a8a409d15ea6111a7098629b8f1050/one-java-agent-plugin/src/main/java/com/alibaba/oneagent/utils/IOUtils.java","https://snyk.io/vuln/SNYK-JAVA-COMALIBABAONEAGENT-2407874"],"severity":{"label":"medium","score":6.9},"sources":[{"source":"osv","source_id":"GHSA-9hr3-j9mc-xmq2","url":"https://osv.dev/vulnerability/GHSA-9hr3-j9mc-xmq2"}],"summary":"Path Traversal in com.alibaba.oneagent:one-java-agent-plugin"}