{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"3.1.4"}],"component":"org.codehaus.mevenide:netbeans","cve_ids":["CVE-2019-17561"],"ecosystem":"Maven","epss":0.01675,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-cf8q-j9h3-7237","id":"tcs_01M5N8S8D63FKDFXMZDQGR9DNC","modified_at":"2023-11-08T04:01:24.373895Z","published_at":"2022-05-24T17:12:56Z","references":["https://osv.dev/vulnerability/GHSA-cf8q-j9h3-7237","https://nvd.nist.gov/vuln/detail/CVE-2019-17561","https://lists.apache.org/thread.html/rb218aa720fc525f63d91761fbf67854f454ce7a697dbbee2001ae8b1%40%3Cdev.netbeans.apache.org%3E","https://www.oracle.com/security-alerts/cpujul2020.html"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-cf8q-j9h3-7237","url":"https://osv.dev/vulnerability/GHSA-cf8q-j9h3-7237"}],"summary":"Improper Verification of Cryptographic Signature in Apache Netbeans"}