{"action":"Upgrade org.apache.qpid:qpid-jms-client to 0.10.0 or later.","affected":[{"fixed":"0.10.0","introduced":"0"}],"component":"org.apache.qpid:qpid-jms-client","cve_ids":["CVE-2016-4974"],"ecosystem":"Maven","epss":0.06245,"exploited":false,"fixed_versions":["0.10.0"],"ghsa_id":"GHSA-f38p-mq64-h784","id":"tcs_01M5N8TTNBTQE0HJ8WS45EYSXG","modified_at":"2023-11-08T03:58:29.923117Z","published_at":"2022-05-14T02:46:14Z","references":["https://osv.dev/vulnerability/GHSA-f38p-mq64-h784","https://nvd.nist.gov/vuln/detail/CVE-2016-4974","https://issues.apache.org/jira/browse/QPIDJMS-188","http://packetstormsecurity.com/files/137749/Apache-Qpid-Untrusted-Input-Deserialization.html","http://qpid.apache.org/components/jms/security-0-x.html","http://qpid.apache.org/components/jms/security.html"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-f38p-mq64-h784","url":"https://osv.dev/vulnerability/GHSA-f38p-mq64-h784"}],"summary":"Improper Input Validation in Apache Qpid AMQP 0-x JMS"}