{"action":"Upgrade org.jenkins-ci.plugins:sounds to 0.6 or later.","affected":[{"fixed":"0.6","introduced":"0"}],"component":"org.jenkins-ci.plugins:sounds","cve_ids":["CVE-2020-2097"],"ecosystem":"Maven","epss":0.01209,"exploited":false,"fixed_versions":["0.6"],"ghsa_id":"GHSA-h8w6-c53g-53vv","id":"tcs_01M5N905ZBF9R5RZCEHW7T3FDM","modified_at":"2023-11-08T04:02:49.389364Z","published_at":"2022-05-24T17:06:23Z","references":["https://osv.dev/vulnerability/GHSA-h8w6-c53g-53vv","https://nvd.nist.gov/vuln/detail/CVE-2020-2097","https://github.com/jenkinsci/sounds-plugin/commit/0c376d46fd91b12696e5f7389110ddece0724457","https://jenkins.io/security/advisory/2020-01-15/#SECURITY-814"],"severity":{"label":"high","score":8.8},"sources":[{"source":"osv","source_id":"GHSA-h8w6-c53g-53vv","url":"https://osv.dev/vulnerability/GHSA-h8w6-c53g-53vv"}],"summary":"Missing permission checks in Jenkins Sounds Plugin allow OS command execution"}