{"action":"Upgrade io.projectreactor.netty:reactor-netty-http to 0.8.16 (0.8.x) or 0.9.5 (0.9.x) or later.","affected":[{"fixed":"0.9.5","introduced":"0.9.0"},{"fixed":"0.8.16","introduced":"0.8.0"}],"component":"io.projectreactor.netty:reactor-netty-http","cve_ids":["CVE-2020-5404"],"ecosystem":"Maven","epss":0.00659,"exploited":false,"fixed_versions":["0.9.5","0.8.16"],"ghsa_id":"GHSA-gpch-h32j-gx6x","id":"tcs_01M5N8YKN95K3XQFX9V0X15SW7","modified_at":"2023-11-08T04:03:55.102290Z","published_at":"2022-02-10T20:24:17Z","references":["https://osv.dev/vulnerability/GHSA-gpch-h32j-gx6x","https://nvd.nist.gov/vuln/detail/CVE-2020-5404","https://pivotal.io/security/cve-2020-5404"],"severity":{"label":"medium","score":5.9},"sources":[{"source":"osv","source_id":"GHSA-gpch-h32j-gx6x","url":"https://osv.dev/vulnerability/GHSA-gpch-h32j-gx6x"}],"summary":"Insufficiently Protected Credentials in Reactor Netty"}