{"action":"Upgrade org.eclipse.milo:sdk-server to 0.6.8 or later.","affected":[{"fixed":"0.6.8","introduced":"0"}],"component":"org.eclipse.milo:sdk-server","cve_ids":["CVE-2022-25897"],"ecosystem":"Maven","epss":0.01277,"exploited":false,"fixed_versions":["0.6.8"],"ghsa_id":"GHSA-fph9-f5r6-vhqf","id":"tcs_01M5N8WFK96HS0EXJR7Z0A8TYZ","modified_at":"2023-11-08T04:08:51.329398Z","published_at":"2022-09-15T03:35:46Z","references":["https://osv.dev/vulnerability/GHSA-fph9-f5r6-vhqf","https://github.com/eclipse/milo/security/advisories/GHSA-fph9-f5r6-vhqf","https://nvd.nist.gov/vuln/detail/CVE-2022-25897","https://github.com/eclipse/milo/issues/1030","https://github.com/eclipse/milo/pull/1031","https://github.com/eclipse/milo/commit/4534381760d7d9f0bf00cbf6a8449bb0d13c6ce5","https://github.com/eclipse/milo","https://security.snyk.io/vuln/SNYK-JAVA-ORGECLIPSEMILO-2990191"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-fph9-f5r6-vhqf","url":"https://osv.dev/vulnerability/GHSA-fph9-f5r6-vhqf"}],"summary":"Eclipse Milo vulnerable to Resource Exhaustion (Denial of Service)"}