{"action":"Upgrade org.apache.xmlgraphics:batik to 1.13 or later.","affected":[{"fixed":"1.13","introduced":"0"}],"component":"org.apache.xmlgraphics:batik","cve_ids":["CVE-2019-17566"],"ecosystem":"Maven","epss":0.10867,"exploited":false,"fixed_versions":["1.13"],"ghsa_id":"GHSA-cmx4-p4v5-hmr5","id":"tcs_01M5N8SSK0M2EA412T8JT9G5YV","modified_at":"2024-02-16T08:14:56.668102Z","published_at":"2022-02-09T00:46:46Z","references":["https://osv.dev/vulnerability/GHSA-cmx4-p4v5-hmr5","https://nvd.nist.gov/vuln/detail/CVE-2019-17566","https://github.com/apache/xmlgraphics-batik/commit/bc6078ca949039e2076cd08b4cb169c84c1179b1","https://github.com/apache/xmlgraphics-batik","https://issues.apache.org/jira/browse/BATIK-1276","https://lists.apache.org/thread.html/rab94fe68b180d2e2fba97abf6fe1ec83cff826be25f86cd90f047171%40%3Ccommits.myfaces.apache.org%3E","https://lists.apache.org/thread.html/rab94fe68b180d2e2fba97abf6fe1ec83cff826be25f86cd90f047171@%3Ccommits.myfaces.apache.org%3E","https://lists.apache.org/thread.html/rcab14a9ec91aa4c151e0729966282920423eff50a22759fd21db6509%40%3Ccommits.myfaces.apache.org%3E","https://lists.apache.org/thread.html/rcab14a9ec91aa4c151e0729966282920423eff50a22759fd21db6509@%3Ccommits.myfaces.apache.org%3E","https://security.gentoo.org/glsa/202401-11","https://www.oracle.com//security-alerts/cpujul2021.html","https://www.oracle.com/security-alerts/cpuApr2021.html","https://www.oracle.com/security-alerts/cpujan2021.html","https://www.oracle.com/security-alerts/cpujan2022.html","https://www.oracle.com/security-alerts/cpujul2022.html","https://www.oracle.com/security-alerts/cpuoct2021.html","https://xmlgraphics.apache.org/security.html"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-cmx4-p4v5-hmr5","url":"https://osv.dev/vulnerability/GHSA-cmx4-p4v5-hmr5"}],"summary":"Server-side request forgery (SSRF) in Apache Batik"}