{"action":"Upgrade org.eclipse.californium:scandium to 2.7.4 (2.x) or 3.7.0 (3.x) or later.","affected":[{"fixed":"3.7.0","introduced":"3.0.0"},{"fixed":"2.7.4","introduced":"2.7.0"}],"component":"org.eclipse.californium:scandium","cve_ids":["CVE-2022-39368"],"ecosystem":"Maven","epss":0.00612,"exploited":false,"fixed_versions":["3.7.0","2.7.4"],"ghsa_id":"GHSA-p72g-cgh9-ghjg","id":"tcs_01M5N96QXHCNWASMWEBK6MWYQ8","modified_at":"2023-11-08T04:10:20.041591Z","published_at":"2022-11-09T17:20:03Z","references":["https://osv.dev/vulnerability/GHSA-p72g-cgh9-ghjg","https://github.com/eclipse-californium/californium/security/advisories/GHSA-p72g-cgh9-ghjg","https://nvd.nist.gov/vuln/detail/CVE-2022-39368","https://github.com/eclipse-californium/californium/issues/2065","https://github.com/eclipse-californium/californium/commit/5648a0c27c2c2667c98419254557a14bac2b1f3f","https://github.com/eclipse-californium/californium/commit/726bac57659410da463dcf404b3e79a7312ac0b9","https://cwe.mitre.org/data/definitions/452.html","https://github.com/eclipse-californium/californium"],"severity":{"label":"high","score":8.2},"sources":[{"source":"osv","source_id":"GHSA-p72g-cgh9-ghjg","url":"https://osv.dev/vulnerability/GHSA-p72g-cgh9-ghjg"}],"summary":"Failing DTLS handshakes may cause throttling to block processing of records"}