{"action":"Upgrade org.apache.karaf.config:org.apache.karaf.config.core to 4.2.5 or later.","affected":[{"fixed":"4.2.5","introduced":"0"}],"component":"org.apache.karaf.config:org.apache.karaf.config.core","cve_ids":["CVE-2019-0226"],"ecosystem":"Maven","epss":0.01802,"exploited":false,"fixed_versions":["4.2.5"],"ghsa_id":"GHSA-fjw4-39pg-vf4f","id":"tcs_01M5N8W8W0RZSA192DKMHCFBW6","modified_at":"2023-11-08T04:00:32.092843Z","published_at":"2022-05-24T16:45:24Z","references":["https://osv.dev/vulnerability/GHSA-fjw4-39pg-vf4f","https://nvd.nist.gov/vuln/detail/CVE-2019-0226","https://github.com/apache/karaf/pull/805","https://github.com/apache/karaf","https://issues.apache.org/jira/browse/KARAF-6230","https://lists.apache.org/thread.html/1baa6f1df0e95fb1cd679067117354af2ab4423277d9a0ff6e8bf790@%3Cdev.karaf.apache.org%3E","https://lists.apache.org/thread.html/r218c7e017af0a860ae21bf7ab77520fd2070c8f52db680eeec03a266@%3Ccommits.karaf.apache.org%3E"],"severity":{"label":"medium","score":4.9},"sources":[{"source":"osv","source_id":"GHSA-fjw4-39pg-vf4f","url":"https://osv.dev/vulnerability/GHSA-fjw4-39pg-vf4f"}],"summary":"Apache Karaf vulnerable to relative path traversal"}