{"action":"Upgrade org.apache.sling:org.apache.sling.commons.messaging.mail to 2.0 or later.","affected":[{"fixed":"2.0","introduced":"0"}],"component":"org.apache.sling:org.apache.sling.commons.messaging.mail","cve_ids":["CVE-2021-44549"],"ecosystem":"Maven","epss":0.02081,"exploited":false,"fixed_versions":["2.0"],"ghsa_id":"GHSA-c69w-jj56-834w","id":"tcs_01M5N8RQ8XT950HSRZCVDWKVW5","modified_at":"2023-11-08T04:07:17.350592Z","published_at":"2021-12-16T14:12:49Z","references":["https://osv.dev/vulnerability/GHSA-c69w-jj56-834w","https://nvd.nist.gov/vuln/detail/CVE-2021-44549","https://github.com/eclipse-ee4j/mail/issues/429","https://github.com/eclipse-ee4j","https://javaee.github.io/javamail/docs/SSLNOTES.txt","https://javaee.github.io/javamail/docs/api/com/sun/mail/smtp/package-summary.html","https://lists.apache.org/thread/l8p9h2bqvkj6rhv4w8kzctb817415b7f"],"severity":{"label":"high","score":7.4},"sources":[{"source":"osv","source_id":"GHSA-c69w-jj56-834w","url":"https://osv.dev/vulnerability/GHSA-c69w-jj56-834w"}],"summary":"Improper Certificate Validation and Improper Validation of Certificate with Host Mismatch in Apache Sling Commons Messaging Mail"}