{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"4.3.2"}],"component":"edu.stanford.nlp:stanford-corenlp","cve_ids":["CVE-2022-0198"],"ecosystem":"Maven","epss":0.00739,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-mh83-jcw5-rjh8","id":"tcs_01M5N954NHF41G90FF3K0VCZWF","modified_at":"2024-02-19T05:32:04.914887Z","published_at":"2022-01-14T21:07:23Z","references":["https://osv.dev/vulnerability/GHSA-mh83-jcw5-rjh8","https://nvd.nist.gov/vuln/detail/CVE-2022-0198","https://github.com/stanfordnlp/corenlp/commit/1f52136321cfca68b991bd7870563d06cf96624d","https://github.com/stanfordnlp/corenlp","https://huntr.dev/bounties/3d7e70fe-dddd-4b79-af62-8e058c4d5763"],"severity":{"label":"medium","score":6.1},"sources":[{"source":"osv","source_id":"GHSA-mh83-jcw5-rjh8","url":"https://osv.dev/vulnerability/GHSA-mh83-jcw5-rjh8"}],"summary":"XML External Entity Reference in edu.stanford.nlp:stanford-corenlp"}