{"action":"Upgrade cn.hutool:hutool-http to 5.7.19 or later.","affected":[{"fixed":"5.7.19","introduced":"0"}],"component":"cn.hutool:hutool-http","cve_ids":["CVE-2022-22885"],"ecosystem":"Maven","epss":0.01301,"exploited":false,"fixed_versions":["5.7.19"],"ghsa_id":"GHSA-p7w9-8mxw-p3g7","id":"tcs_01M5N96X1E4S835278E21BF5X7","modified_at":"2023-11-08T04:08:14.197372Z","published_at":"2022-02-17T00:00:26Z","references":["https://osv.dev/vulnerability/GHSA-p7w9-8mxw-p3g7","https://nvd.nist.gov/vuln/detail/CVE-2022-22885","https://github.com/dromara/hutool/issues/2042","https://apidoc.gitee.com/dromara/hutool/cn/hutool/http/ssl/DefaultSSLInfo.html","https://github.com/dromara/hutool"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-p7w9-8mxw-p3g7","url":"https://osv.dev/vulnerability/GHSA-p7w9-8mxw-p3g7"}],"summary":"Improper Certificate Validation in Hutool"}