{"action":"Upgrade com.google.oauth-client:google-oauth-client to 1.31.0 or later.","affected":[{"fixed":"1.31.0","introduced":"0"}],"component":"com.google.oauth-client:google-oauth-client","cve_ids":["CVE-2020-7692"],"ecosystem":"Maven","epss":0.01522,"exploited":false,"fixed_versions":["1.31.0"],"ghsa_id":"GHSA-f263-c949-w85g","id":"tcs_01M5N8TQ2EV89B1AQGJ1CK3EHM","modified_at":"2026-07-08T06:49:30.215904081Z","published_at":"2021-09-28T16:16:52Z","references":["https://osv.dev/vulnerability/GHSA-f263-c949-w85g","https://nvd.nist.gov/vuln/detail/CVE-2020-7692","https://github.com/googleapis/google-oauth-java-client/issues/469","https://github.com/googleapis/google-oauth-java-client/commit/13433cd7dd06267fc261f0b1d4764f8e3432c824","https://github.com/googleapis/google-oauth-java-client","https://lists.apache.org/thread.html/r3db6ac73e0558d64f0b664f2fa4ef0a865e57c5de20f8321d3b48678@%3Ccommits.druid.apache.org%3E","https://lists.apache.org/thread.html/reae8909b264d1103f321b9ce1623c10c1ddc77dba9790247f2c0c90f@%3Ccommits.druid.apache.org%3E","https://snyk.io/vuln/SNYK-JAVA-COMGOOGLEOAUTHCLIENT-575276","https://tools.ietf.org/html/rfc7636%23section-1","https://tools.ietf.org/html/rfc8252%23section-8.1"],"severity":{"label":"high","score":7.4},"sources":[{"source":"osv","source_id":"GHSA-f263-c949-w85g","url":"https://osv.dev/vulnerability/GHSA-f263-c949-w85g"}],"summary":"Improper Authorization in Google OAuth Client"}