{"action":"Upgrade org.netbeans.html:pom to 1.7.1 or later.","affected":[{"fixed":"1.7.1","introduced":"0"}],"component":"org.netbeans.html:pom","cve_ids":["CVE-2020-17534"],"ecosystem":"Maven","epss":0.00409,"exploited":false,"fixed_versions":["1.7.1"],"ghsa_id":"GHSA-ppc3-fpvh-7396","id":"tcs_01M5N97SRH2ZKJ54XSFRNQMGDD","modified_at":"2023-11-08T04:02:43.124320Z","published_at":"2022-02-09T22:25:18Z","references":["https://osv.dev/vulnerability/GHSA-ppc3-fpvh-7396","https://nvd.nist.gov/vuln/detail/CVE-2020-17534","https://github.com/apache/netbeans-html4j/commit/fa70e507e5555e1adb4f6518479fc408a7abd0e6","https://lists.apache.org/thread.html/ra6119c0cdfccf051a846fa11b61364f5df9e7db93c310706a947f86a%40%3Cdev.netbeans.apache.org%3E"],"severity":{"label":"high","score":7},"sources":[{"source":"osv","source_id":"GHSA-ppc3-fpvh-7396","url":"https://osv.dev/vulnerability/GHSA-ppc3-fpvh-7396"}],"summary":"Improper synchronization in Apache Netbeans HTML/Java API"}