{"action":"Upgrade org.apache.nutch:nutch to 1.18 or later.","affected":[{"fixed":"1.18","introduced":"0"}],"component":"org.apache.nutch:nutch","cve_ids":["CVE-2021-23901"],"ecosystem":"Maven","epss":0.04412,"exploited":false,"fixed_versions":["1.18"],"ghsa_id":"GHSA-fxhp-wrw9-3r97","id":"tcs_01M5N8WXCQAQH9ZX5TKXM8QBJ7","modified_at":"2024-02-17T05:21:10.001015Z","published_at":"2022-03-18T17:46:29Z","references":["https://osv.dev/vulnerability/GHSA-fxhp-wrw9-3r97","https://nvd.nist.gov/vuln/detail/CVE-2021-23901","https://github.com/apache/nutch/pull/563","https://issues.apache.org/jira/browse/NUTCH-2841","https://lists.apache.org/thread.html/r090321840b44cc91086c4e317bf2baffa270749dde6c1273b6567f7c%40%3Cdev.nutch.apache.org%3E","https://lists.apache.org/thread.html/r5e2f7737b42c73a3325f3c2c8cdee1ec27631b3a0e144104d84d70e6@%3Cannounce.apache.org%3E","https://lists.apache.org/thread.html/r7ddfd680aa7ea001ca8da63bb23e3f8caa095a8b4f2261e46bade5c7@%3Cdev.nutch.apache.org%3E","https://security.netapp.com/advisory/ntap-20210513-0003"],"severity":{"label":"critical","score":9.1},"sources":[{"source":"osv","source_id":"GHSA-fxhp-wrw9-3r97","url":"https://osv.dev/vulnerability/GHSA-fxhp-wrw9-3r97"}],"summary":"XML external entity (XXE) injection in Apache Nutch"}