{"action":"Upgrade com.coravy.hudson.plugins.github:github to 1.34.5 or later.","affected":[{"fixed":"1.34.5","introduced":"0"}],"component":"com.coravy.hudson.plugins.github:github","cve_ids":["CVE-2022-36885"],"ecosystem":"Maven","epss":0.00922,"exploited":false,"fixed_versions":["1.34.5"],"ghsa_id":"GHSA-mxcc-7h5m-x57r","id":"tcs_01M5N9626PKYMHY1PKDSV21FJW","modified_at":"2024-02-20T05:34:10.771595Z","published_at":"2022-07-28T00:00:43Z","references":["https://osv.dev/vulnerability/GHSA-mxcc-7h5m-x57r","https://nvd.nist.gov/vuln/detail/CVE-2022-36885","https://github.com/jenkinsci/github-plugin/commit/11d1d79ebf85248dc43432389746c1ecc3452b6a","https://github.com/jenkinsci/github-plugin","https://github.com/jenkinsci/github-plugin/releases/tag/v1.34.5","https://plugins.jenkins.io/github-issues","https://www.jenkins.io/security/advisory/2022-07-27/#SECURITY-1849","http://www.openwall.com/lists/oss-security/2022/07/27/1"],"severity":{"label":"low","score":3.1},"sources":[{"source":"osv","source_id":"GHSA-mxcc-7h5m-x57r","url":"https://osv.dev/vulnerability/GHSA-mxcc-7h5m-x57r"}],"summary":"Jenkins GitHub plugin uses weak webhook signature function"}