{"action":"Upgrade org.apache.qpid:proton-j to 0.12.1 or later.","affected":[{"fixed":"0.12.1","introduced":"0"}],"component":"org.apache.qpid:proton-j","cve_ids":["CVE-2016-2166"],"ecosystem":"Maven","epss":0.04267,"exploited":false,"fixed_versions":["0.12.1"],"ghsa_id":"GHSA-f5cf-f7px-xpmh","id":"tcs_01M5N8V1827VRNJ13XQSAKTPD5","modified_at":"2023-11-08T03:58:23.916791Z","published_at":"2018-10-16T19:50:27Z","references":["https://osv.dev/vulnerability/GHSA-f5cf-f7px-xpmh","https://nvd.nist.gov/vuln/detail/CVE-2016-2166","https://git-wip-us.apache.org/repos/asf?p=qpid-proton.git;h=a058585","https://github.com/advisories/GHSA-f5cf-f7px-xpmh","https://issues.apache.org/jira/browse/PROTON-1157","https://lists.apache.org/thread.html/914424e4d798a340f523b6169aaf39b626971d9bb00fcdeb1d5d6c0d@%3Ccommits.qpid.apache.org%3E","http://lists.fedoraproject.org/pipermail/package-announce/2016-April/182414.html","http://packetstormsecurity.com/files/136403/Apache-Qpid-Proton-0.12.0-SSL-Failure.html","http://qpid.apache.org/releases/qpid-proton-0.12.1/release-notes.html","http://www.securityfocus.com/archive/1/537864/100/0/threaded"],"severity":{"label":"medium","score":6.5},"sources":[{"source":"osv","source_id":"GHSA-f5cf-f7px-xpmh","url":"https://osv.dev/vulnerability/GHSA-f5cf-f7px-xpmh"}],"summary":"Moderate severity vulnerability that affects org.apache.qpid:proton-j"}