{"action":"Upgrade org.eclipse.milo:sdk-client to 0.3.6 or later.","affected":[{"fixed":"0.3.6","introduced":"0"}],"component":"org.eclipse.milo:sdk-client","cve_ids":["CVE-2019-19135"],"ecosystem":"Maven","epss":0.01043,"exploited":false,"fixed_versions":["0.3.6"],"ghsa_id":"GHSA-pq4w-qm9g-qx68","id":"tcs_01M5N97VM5P3VN6JQYQSDYV68W","modified_at":"2024-02-16T08:06:53.192281Z","published_at":"2020-03-16T22:46:50Z","references":["https://osv.dev/vulnerability/GHSA-pq4w-qm9g-qx68","https://github.com/eclipse/milo/security/advisories/GHSA-pq4w-qm9g-qx68","https://nvd.nist.gov/vuln/detail/CVE-2019-19135","https://github.com/eclipse/milo/commit/cac0e710bf2b8bed9c602fc597e9de1d8903abed","https://opcfoundation.org/SecurityBulletins/OPC%20Foundation%20Security%20Bulletin%20CVE-2019-19135.pdf","https://opcfoundation.org/security-bulletins"],"severity":{"label":"high","score":7.4},"sources":[{"source":"osv","source_id":"GHSA-pq4w-qm9g-qx68","url":"https://osv.dev/vulnerability/GHSA-pq4w-qm9g-qx68"}],"summary":"Insufficient Nonce Validation in Eclipse Milo Client"}