{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"7.0.1"}],"component":"com.itextpdf:itext-rups","cve_ids":["CVE-2017-20151"],"ecosystem":"Maven","epss":0.00816,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-j69f-fgh5-f7mc","id":"tcs_01M5N924V3EKFTX5E3JX18GY23","modified_at":"2023-11-08T03:59:17.325834Z","published_at":"2022-12-30T12:30:25Z","references":["https://osv.dev/vulnerability/GHSA-j69f-fgh5-f7mc","https://nvd.nist.gov/vuln/detail/CVE-2017-20151","https://github.com/itext/rups/commit/ac5590925874ef810018a6b60fec216eee54fb32","https://github.com/itext/rups","https://vuldb.com/?ctiid.217054","https://vuldb.com/?id.217054"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-j69f-fgh5-f7mc","url":"https://osv.dev/vulnerability/GHSA-j69f-fgh5-f7mc"}],"summary":"iText RUPS XML External Entity vulnerability"}