{"action":"Upgrade org.apache.jena:jena to 4.5.0 or later.","affected":[{"fixed":"4.5.0","introduced":"4.4.0"}],"component":"org.apache.jena:jena","cve_ids":["CVE-2022-28890"],"ecosystem":"Maven","epss":0.02668,"exploited":false,"fixed_versions":["4.5.0"],"ghsa_id":"GHSA-gchv-364h-r896","id":"tcs_01M5N8Y1939C1TCP68ASYKBG96","modified_at":"2023-11-08T04:09:06.180591Z","published_at":"2022-05-06T00:00:53Z","references":["https://osv.dev/vulnerability/GHSA-gchv-364h-r896","https://nvd.nist.gov/vuln/detail/CVE-2022-28890","https://gitbox.apache.org/repos/asf/jena.git","https://jena.apache.org/about_jena/security-advisories.html#cve-2022-28890---processing-external-dtds","https://lists.apache.org/thread/h88oh642455wljo0p5jgzs9phk4gj878"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-gchv-364h-r896","url":"https://osv.dev/vulnerability/GHSA-gchv-364h-r896"}],"summary":"XML External Entity Reference in apache jena"}