{"action":"Upgrade org.expressme:JOpenId to 1.08 or later.","affected":[{"fixed":"1.08","introduced":"0"}],"component":"org.expressme:JOpenId","cve_ids":["CVE-2010-10006"],"ecosystem":"Maven","epss":0.00887,"exploited":false,"fixed_versions":["1.08"],"ghsa_id":"GHSA-m4f8-p58g-j8mj","id":"tcs_01M5N948TDBDMQ4MMP5YR8WC6T","modified_at":"2023-11-08T03:56:55.354502Z","published_at":"2023-01-18T00:30:18Z","references":["https://osv.dev/vulnerability/GHSA-m4f8-p58g-j8mj","https://nvd.nist.gov/vuln/detail/CVE-2010-10006","https://github.com/michaelliao/jopenid/commit/c9baaa976b684637f0d5a50268e91846a7a719ab","https://github.com/michaelliao/jopenid/releases/tag/JOpenId-1.08","https://vuldb.com/?ctiid.218460","https://vuldb.com/?id.218460"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-m4f8-p58g-j8mj","url":"https://osv.dev/vulnerability/GHSA-m4f8-p58g-j8mj"}],"summary":"Observable timing discrepancy in JOpenId"}