{"action":"Upgrade org.apache.sshd:sshd-common to 2.9.2 or later.","affected":[{"fixed":"2.9.2","introduced":"0"}],"component":"org.apache.sshd:sshd-common","cve_ids":["CVE-2022-45047"],"ecosystem":"Maven","epss":0.0381,"exploited":false,"fixed_versions":["2.9.2"],"ghsa_id":"GHSA-fhw8-8j55-vwgq","id":"tcs_01M5N8W3FHVPZR7NT9AQ3DXY4Y","modified_at":"2024-02-16T08:13:30.681636Z","published_at":"2022-11-16T12:00:18Z","references":["https://osv.dev/vulnerability/GHSA-fhw8-8j55-vwgq","https://nvd.nist.gov/vuln/detail/CVE-2022-45047","https://github.com/apache/mina-sshd/commit/03238d51586f6b3c0bdbb1a23cf16799344d6c32","https://github.com/apache/mina-sshd/commit/10de190e7d3f9189deb76b8d08c72334a1fe2df0","https://github.com/apache/mina-sshd/commit/5a8fe830b2a2308a2b24ac8115a391af477f64f5","https://github.com/apache/mina-sshd","https://www.mail-archive.com/dev@mina.apache.org/msg39312.html"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-fhw8-8j55-vwgq","url":"https://osv.dev/vulnerability/GHSA-fhw8-8j55-vwgq"}],"summary":"Unsafe deserialization in Apache MINA SSHD"}