{"action":"Upgrade mysql:mysql-connector-java to 5.1.42 or later.","affected":[{"fixed":"5.1.42","introduced":"0"}],"component":"mysql:mysql-connector-java","cve_ids":["CVE-2017-3589"],"ecosystem":"Maven","epss":0.00466,"exploited":false,"fixed_versions":["5.1.42"],"ghsa_id":"GHSA-cjcf-wm2p-59h5","id":"tcs_01M5N8SKDR8HBSX24ZNBM56544","modified_at":"2023-11-08T03:59:21.268032Z","published_at":"2022-05-13T01:45:42Z","references":["https://osv.dev/vulnerability/GHSA-cjcf-wm2p-59h5","https://nvd.nist.gov/vuln/detail/CVE-2017-3589","http://www.debian.org/security/2017/dsa-3857","http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html"],"severity":{"label":"low","score":3.3},"sources":[{"source":"osv","source_id":"GHSA-cjcf-wm2p-59h5","url":"https://osv.dev/vulnerability/GHSA-cjcf-wm2p-59h5"}],"summary":"Exposure of Sensitive Information to an Unauthorized Actor in Oracle MySQL Connectors Java"}