{"action":"Upgrade org.jenkins-ci.plugins:nuget to 1.1 or later.","affected":[{"fixed":"1.1","introduced":"0"}],"component":"org.jenkins-ci.plugins:nuget","cve_ids":["CVE-2021-21658"],"ecosystem":"Maven","epss":0.01536,"exploited":false,"fixed_versions":["1.1"],"ghsa_id":"GHSA-p674-hh8x-rv5h","id":"tcs_01M5N96MG2QDH3T1CQGKNJ7D1G","modified_at":"2024-02-16T08:15:31.353768Z","published_at":"2022-05-24T19:03:11Z","references":["https://osv.dev/vulnerability/GHSA-p674-hh8x-rv5h","https://nvd.nist.gov/vuln/detail/CVE-2021-21658","https://github.com/jenkinsci/nuget-plugin/commit/542bf38ac52f045741a5670e1644af351878f7e0","https://github.com/jenkinsci/nuget-plugin/commit/c8ed4cb5b1c42f3c407f9f418b4e0b4274bea5a9","https://github.com/jenkinsci/nuget-plugin","https://www.jenkins.io/security/advisory/2021-05-25/#SECURITY-2340","http://www.openwall.com/lists/oss-security/2021/05/25/3"],"severity":{"label":"critical","score":9.1},"sources":[{"source":"osv","source_id":"GHSA-p674-hh8x-rv5h","url":"https://osv.dev/vulnerability/GHSA-p674-hh8x-rv5h"}],"summary":"XML external entity vulnerability in Jenkins Nuget Plugin"}