{"action":"Upgrade org.jenkins-ci.plugins.workflow:workflow-cps-global-lib to the fixed version for your line (see fixed_versions).","affected":[{"fixed":"561.va","introduced":"544.vff04fa68714d"},{"fixed":"2.21.1","introduced":"2.19"},{"fixed":"2.18.1","introduced":"0"}],"component":"org.jenkins-ci.plugins.workflow:workflow-cps-global-lib","cve_ids":["CVE-2022-25174"],"ecosystem":"Maven","epss":0.01404,"exploited":false,"fixed_versions":["561.va","2.21.1","2.18.1"],"ghsa_id":"GHSA-g9fx-6j5c-grmw","id":"tcs_01M5N8XWW3K4T02T59B2RH2RD8","modified_at":"2024-02-16T08:21:55.948943Z","published_at":"2022-02-16T00:01:36Z","references":["https://osv.dev/vulnerability/GHSA-g9fx-6j5c-grmw","https://nvd.nist.gov/vuln/detail/CVE-2022-25174","https://github.com/jenkinsci/workflow-cps-global-lib-plugin/commit/ace0de3c2d691662021ea10306eeb407da6b6365","https://github.com/CVEProject/cvelist/blob/e19344451ce1c4a4181b9f094b8fd38cd8d86c9f/2022/25xxx/CVE-2022-25174.json","https://www.jenkins.io/security/advisory/2022-02-15/#SECURITY-2463"],"severity":{"label":"high","score":8.8},"sources":[{"source":"osv","source_id":"GHSA-g9fx-6j5c-grmw","url":"https://osv.dev/vulnerability/GHSA-g9fx-6j5c-grmw"}],"summary":"Improper Neutralization of Special Elements used in an OS Command in Jenkins Pipeline: Shared Groovy Libraries Plugin"}