{"action":"Upgrade org.apache.poi:poi-scratchpad to 5.2.1 or later.","affected":[{"fixed":"5.2.1","introduced":"3.8-beta1"}],"component":"org.apache.poi:poi-scratchpad","cve_ids":["CVE-2022-26336"],"ecosystem":"Maven","epss":0.01526,"exploited":false,"fixed_versions":["5.2.1"],"ghsa_id":"GHSA-mqvp-7rrg-9jxc","id":"tcs_01M5N95KM7VEB7QSPGA795GH1H","modified_at":"2024-05-15T07:02:06.818374Z","published_at":"2022-03-05T00:00:44Z","references":["https://osv.dev/vulnerability/GHSA-mqvp-7rrg-9jxc","https://nvd.nist.gov/vuln/detail/CVE-2022-26336","https://lists.apache.org/thread/sprg0kq986pc2271dc3v2oxb1f9qx09j","https://security.netapp.com/advisory/ntap-20221028-0006"],"severity":{"label":"medium","score":5.5},"sources":[{"source":"osv","source_id":"GHSA-mqvp-7rrg-9jxc","url":"https://osv.dev/vulnerability/GHSA-mqvp-7rrg-9jxc"}],"summary":"Improper Input Validation and Allocation of Resources Without Limits or Throttling in poi-scratchpad"}