{"action":"Upgrade org.jenkinsci.plugins:pipeline-model-parent to 2.2218.v56d0cda or later.","affected":[{"fixed":"2.2218.v56d0cda","introduced":"0"}],"component":"org.jenkinsci.plugins:pipeline-model-parent","cve_ids":["CVE-2024-52551"],"ecosystem":"Maven","epss":0.00587,"exploited":false,"fixed_versions":["2.2218.v56d0cda"],"ghsa_id":"GHSA-p2qq-c693-q53w","id":"tcs_01M5N967G4F4PVCX35Q33AG4N1","modified_at":"2024-11-14T23:20:56.178332Z","published_at":"2024-11-13T21:30:38Z","references":["https://osv.dev/vulnerability/GHSA-p2qq-c693-q53w","https://nvd.nist.gov/vuln/detail/CVE-2024-52551","https://github.com/jenkinsci/pipeline-model-definition-plugin","https://www.jenkins.io/security/advisory/2024-11-13/#SECURITY-3361"],"severity":{"label":"high","score":8},"sources":[{"source":"osv","source_id":"GHSA-p2qq-c693-q53w","url":"https://osv.dev/vulnerability/GHSA-p2qq-c693-q53w"}],"summary":"Restarting a run with revoked script approval allowed by Jenkins Pipeline: Declarative Plugin"}