{"action":"Upgrade org.sonatype.nexus:nexus-repository to 3.34.0-01 or later.","affected":[{"fixed":"3.34.0-01","introduced":"3.0.0"}],"component":"org.sonatype.nexus:nexus-repository","cve_ids":["CVE-2021-40143"],"ecosystem":"Maven","epss":0.02322,"exploited":false,"fixed_versions":["3.34.0-01"],"ghsa_id":"GHSA-f34x-8pf6-qc9c","id":"tcs_01M5N8TT5TDDCW5Q51DWMW643S","modified_at":"2023-11-08T04:06:46.479030Z","published_at":"2021-09-08T17:42:18Z","references":["https://osv.dev/vulnerability/GHSA-f34x-8pf6-qc9c","https://nvd.nist.gov/vuln/detail/CVE-2021-40143","https://github.com/sonatype/nexus-public","https://help.sonatype.com/repomanager3/release-notes/2021-release-notes","https://issues.sonatype.org/secure/ReleaseNote.jspa","https://support.sonatype.com/hc/en-us/articles/4405941762579"],"severity":{"label":"high","score":8.2},"sources":[{"source":"osv","source_id":"GHSA-f34x-8pf6-qc9c","url":"https://osv.dev/vulnerability/GHSA-f34x-8pf6-qc9c"}],"summary":"HTTP header injection in Sonatype Nexus Repository"}