{"action":"Upgrade com.mikesamuel:json-sanitizer to 1.2.2 or later.","affected":[{"fixed":"1.2.2","introduced":"0"}],"component":"com.mikesamuel:json-sanitizer","cve_ids":["CVE-2021-23899"],"ecosystem":"Maven","epss":0.02093,"exploited":false,"fixed_versions":["1.2.2"],"ghsa_id":"GHSA-mm8j-9x84-m9cv","id":"tcs_01M5N95D9YMS7ZN147NVQ9X90F","modified_at":"2023-11-08T04:05:13.858556Z","published_at":"2021-06-16T17:34:18Z","references":["https://osv.dev/vulnerability/GHSA-mm8j-9x84-m9cv","https://nvd.nist.gov/vuln/detail/CVE-2021-23899","https://github.com/OWASP/json-sanitizer/commit/a37f594f7378a1c76b3283e0dab9e1ab1dc0247e","https://github.com/OWASP/json-sanitizer/compare/v1.2.1...v1.2.2","https://groups.google.com/g/json-sanitizer-support/c/dAW1AeNMoA0"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-mm8j-9x84-m9cv","url":"https://osv.dev/vulnerability/GHSA-mm8j-9x84-m9cv"}],"summary":"Arbitrary code injection in json-sanitizer"}