{"action":"Upgrade org.apache.ozone:ozone-main to 1.2.0 or later.","affected":[{"fixed":"1.2.0","introduced":"0"}],"component":"org.apache.ozone:ozone-main","cve_ids":["CVE-2021-41532"],"ecosystem":"Maven","epss":0.02391,"exploited":false,"fixed_versions":["1.2.0"],"ghsa_id":"GHSA-gc37-9g7f-96fx","id":"tcs_01M5N8XYSQ576X6C8KD8DJ1BX2","modified_at":"2023-11-08T04:06:59.658462Z","published_at":"2021-11-23T18:17:50Z","references":["https://osv.dev/vulnerability/GHSA-gc37-9g7f-96fx","https://nvd.nist.gov/vuln/detail/CVE-2021-41532","https://mail-archives.apache.org/mod_mbox/ozone-dev/202111.mbox/%3Ce0bc6598-9669-b897-fc28-de8a896e36aa%40apache.org%3E","http://www.openwall.com/lists/oss-security/2021/11/19/8"],"severity":{"label":"medium","score":5.3},"sources":[{"source":"osv","source_id":"GHSA-gc37-9g7f-96fx","url":"https://osv.dev/vulnerability/GHSA-gc37-9g7f-96fx"}],"summary":"Apache Ozone exposes OM, SCM and Datanode metadata"}