{"action":"Upgrade io.scif:scifio to 0.43.3 or later.","affected":[{"fixed":"0.43.3","introduced":"0"}],"component":"io.scif:scifio","cve_ids":["CVE-2022-4493"],"ecosystem":"Maven","epss":0.00582,"exploited":false,"fixed_versions":["0.43.3"],"ghsa_id":"GHSA-cmwm-45mj-mpg3","id":"tcs_01M5N8SSE4SG16BTXCTZD2A1H7","modified_at":"2023-11-08T04:10:49.338016Z","published_at":"2022-12-14T12:30:42Z","references":["https://osv.dev/vulnerability/GHSA-cmwm-45mj-mpg3","https://nvd.nist.gov/vuln/detail/CVE-2022-4493","https://github.com/scifio/scifio/commit/fcb0dbca0ec72b22fe0c9ddc8abc9cb188a0ff31","https://github.com/scifio/scifio","https://vuldb.com/?id.215803"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-cmwm-45mj-mpg3","url":"https://osv.dev/vulnerability/GHSA-cmwm-45mj-mpg3"}],"summary":"SCIFIO vulnerable to Path Traversal"}