{"action":"Upgrade org.apache.gobblin:gobblin-core to 0.16.0 or later.","affected":[{"fixed":"0.16.0","introduced":"0"}],"component":"org.apache.gobblin:gobblin-core","cve_ids":["CVE-2021-36151"],"ecosystem":"Maven","epss":0.00437,"exploited":false,"fixed_versions":["0.16.0"],"ghsa_id":"GHSA-p435-w4xm-jj8x","id":"tcs_01M5N96BZ2TNA32ZK8C1K0HP7R","modified_at":"2023-11-08T04:06:12.104111Z","published_at":"2022-02-06T00:01:07Z","references":["https://osv.dev/vulnerability/GHSA-p435-w4xm-jj8x","https://nvd.nist.gov/vuln/detail/CVE-2021-36151","https://lists.apache.org/thread/3cdkyxdd6xk05lsvr3l66dsnvhwyo1t0"],"severity":{"label":"medium","score":5.5},"sources":[{"source":"osv","source_id":"GHSA-p435-w4xm-jj8x","url":"https://osv.dev/vulnerability/GHSA-p435-w4xm-jj8x"}],"summary":"Hadoop token in temp file visible to all users in Apache Gobblin"}