{"action":"Upgrade org.jenkins-ci.plugins.workflow:workflow-cps-global-lib to 2.21.3 (2.x) or 566.vd0a (566.x) or later.","affected":[{"fixed":"2.21.3","introduced":"0"},{"fixed":"566.vd0a","introduced":"544.vff04fa68714d"}],"component":"org.jenkins-ci.plugins.workflow:workflow-cps-global-lib","cve_ids":["CVE-2022-29047"],"ecosystem":"Maven","epss":0.01184,"exploited":false,"fixed_versions":["2.21.3","566.vd0a"],"ghsa_id":"GHSA-hh6f-6fp5-gfpv","id":"tcs_01M5N90QQVGDRN7B4HAZRBWCNT","modified_at":"2023-11-08T04:09:07.458812Z","published_at":"2022-04-13T00:00:17Z","references":["https://osv.dev/vulnerability/GHSA-hh6f-6fp5-gfpv","https://nvd.nist.gov/vuln/detail/CVE-2022-29047","https://github.com/jenkinsci/workflow-cps-global-lib-plugin/commit/97bf32458e60ad252cfe5e7949bacf04459cee64","https://github.com/jenkinsci/workflow-cps-global-lib-plugin/commit/bae59b46cb524549d7f346ba73d3161804c97331","https://www.jenkins.io/security/advisory/2022-04-12/#SECURITY-1951"],"severity":{"label":"high","score":7.3},"sources":[{"source":"osv","source_id":"GHSA-hh6f-6fp5-gfpv","url":"https://osv.dev/vulnerability/GHSA-hh6f-6fp5-gfpv"}],"summary":"Untrusted users can modify some Pipeline libraries in Jenkins Pipeline: Deprecated Groovy Libraries Plugin"}