{"action":"Upgrade org.apache.systemds:systemds to 2.2.2 or later.","affected":[{"fixed":"2.2.2","introduced":"0"}],"component":"org.apache.systemds:systemds","cve_ids":["CVE-2022-26477"],"ecosystem":"Maven","epss":0.02253,"exploited":false,"fixed_versions":["2.2.2"],"ghsa_id":"GHSA-m43h-hfrq-x8wx","id":"tcs_01M5N946Y7B2BMXD3MJ0WDT2HB","modified_at":"2024-10-28T14:52:54.896159Z","published_at":"2022-06-28T00:00:48Z","references":["https://osv.dev/vulnerability/GHSA-m43h-hfrq-x8wx","https://nvd.nist.gov/vuln/detail/CVE-2022-26477","https://github.com/advisories/GHSA-m43h-hfrq-x8wx","https://github.com/apache/systemds","https://github.com/pypa/advisory-database/tree/main/vulns/systemds/PYSEC-2022-222.yaml","https://lists.apache.org/thread/r4x2d2r6d4zykdrrx6s2l4qbxgzws0z3","https://security.netapp.com/advisory/ntap-20220812-0003"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-m43h-hfrq-x8wx#Maven/org.apache.systemds:systemds","url":"https://osv.dev/vulnerability/GHSA-m43h-hfrq-x8wx"}],"summary":"SystemDS CPU exhaustion vulnerability"}