{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"2.20191120.0"}],"component":"com.squareup:connect","cve_ids":["CVE-2021-23331"],"ecosystem":"Maven","epss":0.00341,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-q4hm-fwc9-hmv6","id":"tcs_01M5N98KYYHZMHDCH0WMZKC2GH","modified_at":"2026-03-13T21:57:16.302338Z","published_at":"2021-06-16T17:53:20Z","references":["https://osv.dev/vulnerability/GHSA-q4hm-fwc9-hmv6","https://nvd.nist.gov/vuln/detail/CVE-2021-23331","https://github.com/square/connect-java-sdk","https://github.com/square/connect-java-sdk/blob/master/src/main/java/com/squareup/connect/ApiClient.java%23L613","https://snyk.io/vuln/SNYK-JAVA-COMSQUAREUP-1065988"],"severity":{"label":"low","score":3.3},"sources":[{"source":"osv","source_id":"GHSA-q4hm-fwc9-hmv6","url":"https://osv.dev/vulnerability/GHSA-q4hm-fwc9-hmv6"}],"summary":"Insecure temporary file used in com.squareup:connect"}