{"action":"Upgrade com.oviva.telematik:epa4all-client to 1.2.2 or later.","affected":[{"fixed":"1.2.2","introduced":"0"}],"component":"com.oviva.telematik:epa4all-client","cve_ids":["CVE-2026-45575"],"ecosystem":"Maven","epss":0.00118,"exploited":false,"fixed_versions":["1.2.2"],"ghsa_id":"GHSA-gqx7-6552-67hf","id":"tcs_01M5N8YSZ0A0X3K2N4WD796ABF","modified_at":"2026-06-08T23:45:13.399733147Z","published_at":"2026-05-15T18:30:48Z","references":["https://osv.dev/vulnerability/GHSA-gqx7-6552-67hf","https://github.com/oviva-ag/epa4all-client/security/advisories/GHSA-gqx7-6552-67hf","https://nvd.nist.gov/vuln/detail/CVE-2026-45575","https://github.com/oviva-ag/epa4all-client/pull/36","https://github.com/oviva-ag/epa4all-client/commit/9111d6fbb939007036a7f74b2a93bb278cb5af32","https://github.com/oviva-ag/epa4all-client","https://github.com/oviva-ag/epa4all-client/releases/tag/v1.2.2"],"severity":{"label":"high","score":7.4},"sources":[{"source":"osv","source_id":"GHSA-gqx7-6552-67hf","url":"https://osv.dev/vulnerability/GHSA-gqx7-6552-67hf"}],"summary":"Improper Verification of Cryptographic Signature in com.oviva.telematik:epa4all-client"}