{"action":"Upgrade com.codenameone:codenameone-core to 7.0.71 or later.","affected":[{"fixed":"7.0.71","introduced":"0"}],"component":"com.codenameone:codenameone-core","cve_ids":["CVE-2022-4903"],"ecosystem":"Maven","epss":0.00654,"exploited":false,"fixed_versions":["7.0.71"],"ghsa_id":"GHSA-p6xq-9h8r-v544","id":"tcs_01M5N96QRN85KBSJDP0ZKMG3YP","modified_at":"2024-02-16T08:06:50.959592Z","published_at":"2023-02-10T15:30:28Z","references":["https://osv.dev/vulnerability/GHSA-p6xq-9h8r-v544","https://nvd.nist.gov/vuln/detail/CVE-2022-4903","https://github.com/codenameone/CodenameOne/issues/3583","https://github.com/codenameone/CodenameOne/commit/dad49c9ef26a598619fc48d2697151a02987d478","https://github.com/codenameone/CodenameOne","https://github.com/codenameone/CodenameOne/releases/tag/7.0.71","https://vuldb.com/?ctiid.220470","https://vuldb.com/?id.220470"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-p6xq-9h8r-v544","url":"https://osv.dev/vulnerability/GHSA-p6xq-9h8r-v544"}],"summary":"CodenameOne Pending Intent vulnerability"}