{"action":"Upgrade io.jooby:jooby-netty to 2.2.1 or later.","affected":[{"fixed":"2.2.1","introduced":"0"}],"component":"io.jooby:jooby-netty","cve_ids":["CVE-2020-7622"],"ecosystem":"Maven","epss":0.01602,"exploited":false,"fixed_versions":["2.2.1"],"ghsa_id":"GHSA-gv3v-92v6-m48j","id":"tcs_01M5N8YYXEKR1Y61GANEPEDPS1","modified_at":"2026-09-10T03:48:43.965378365Z","published_at":"2020-04-03T15:23:30Z","references":["https://osv.dev/vulnerability/GHSA-gv3v-92v6-m48j","https://github.com/jooby-project/jooby/security/advisories/GHSA-gv3v-92v6-m48j","https://nvd.nist.gov/vuln/detail/CVE-2020-7622","https://github.com/jooby-project/jooby/commit/b66e3342cf95205324023cfdf2cb5811e8a6dcf4","https://snyk.io/vuln/SNYK-JAVA-IOJOOBY-564249"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-gv3v-92v6-m48j","url":"https://osv.dev/vulnerability/GHSA-gv3v-92v6-m48j"}],"summary":"Improper Neutralization of CRLF Sequences in HTTP Headers in Jooby ('HTTP Response Splitting)"}