{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"1.16"}],"component":"com.wutka:jox","cve_ids":["CVE-2021-43142"],"ecosystem":"Maven","epss":0.01465,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-fcrx-8829-jpqx","id":"tcs_01M5N8VSKADNPNN7MY48VA00AD","modified_at":"2024-12-05T05:32:51.578094Z","published_at":"2022-04-01T00:00:45Z","references":["https://osv.dev/vulnerability/GHSA-fcrx-8829-jpqx","https://nvd.nist.gov/vuln/detail/CVE-2021-43142","https://novysodope.github.io/2021/10/29/64"],"severity":{"label":"medium"},"sources":[{"source":"osv","source_id":"GHSA-fcrx-8829-jpqx","url":"https://osv.dev/vulnerability/GHSA-fcrx-8829-jpqx"}],"summary":"Improper Restriction of XML External Entity Reference in wutka jox"}