{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"0.5.4"}],"component":"org.ini4j:ini4j","cve_ids":["CVE-2022-41404"],"ecosystem":"Maven","epss":0.01818,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-jr6h-r7vg-f9mc","id":"tcs_01M5N93JE742PV7RB1RBZ5RBPX","modified_at":"2025-06-09T18:35:25Z","published_at":"2022-10-12T12:00:20Z","references":["https://osv.dev/vulnerability/GHSA-jr6h-r7vg-f9mc","https://nvd.nist.gov/vuln/detail/CVE-2022-41404","https://github.com/Checkmarx/Vulnerabilities-Proofs-of-Concept/tree/main/2022/CVE-2022-41404","https://lists.debian.org/debian-lts-announce/2022/11/msg00037.html","https://sourceforge.net/p/ini4j/bugs/56","https://sourceforge.net/projects/ini4j"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-jr6h-r7vg-f9mc","url":"https://osv.dev/vulnerability/GHSA-jr6h-r7vg-f9mc"}],"summary":"org.ini4j allows attackers to cause a Denial of Service (DoS)"}