{"action":"Upgrade org.springframework.security.oauth:spring-security-oauth2 to 2.4.2.RELEASE (2.4.x) or 2.5.2.RELEASE (2.5.x) or later.","affected":[{"fixed":"2.5.2.RELEASE","introduced":"2.5.0.RELEASE"},{"fixed":"2.4.2.RELEASE","introduced":"2.4.0.RELEASE"}],"component":"org.springframework.security.oauth:spring-security-oauth2","cve_ids":["CVE-2022-22969"],"ecosystem":"Maven","epss":0.01253,"exploited":false,"fixed_versions":["2.5.2.RELEASE","2.4.2.RELEASE"],"ghsa_id":"GHSA-c2cp-3xj9-97w9","id":"tcs_01M5N8R5BNQKVDAPVBENPMNNT7","modified_at":"2024-05-14T16:15:45.601106Z","published_at":"2022-04-22T00:00:33Z","references":["https://osv.dev/vulnerability/GHSA-c2cp-3xj9-97w9","https://nvd.nist.gov/vuln/detail/CVE-2022-22969","https://spring.io/security/cve-2022-22969","https://tanzu.vmware.com/security/cve-2022-22969","https://www.oracle.com/security-alerts/cpujul2022.html"],"severity":{"label":"medium","score":6.5},"sources":[{"source":"osv","source_id":"GHSA-c2cp-3xj9-97w9","url":"https://osv.dev/vulnerability/GHSA-c2cp-3xj9-97w9"}],"summary":"Denial of service in Spring Security OAuth2"}