{"action":"Upgrade io.dataease:dataease-plugin-common to 1.15.2 or later.","affected":[{"fixed":"1.15.2","introduced":"0"}],"component":"io.dataease:dataease-plugin-common","cve_ids":["CVE-2022-39312"],"ecosystem":"Maven","epss":0.01926,"exploited":false,"fixed_versions":["1.15.2"],"ghsa_id":"GHSA-q4qq-jhjv-7rh2","id":"tcs_01M5N98NC4BT39TC3PVXDBKQNE","modified_at":"2023-11-08T04:10:18.518623Z","published_at":"2022-10-18T18:05:36Z","references":["https://osv.dev/vulnerability/GHSA-q4qq-jhjv-7rh2","https://github.com/dataease/dataease/security/advisories/GHSA-q4qq-jhjv-7rh2","https://nvd.nist.gov/vuln/detail/CVE-2022-39312","https://github.com/dataease/dataease/pull/3328","https://github.com/dataease/dataease/commit/956ee2d6c9e81349a60aef435efc046888e10a6d","https://github.com/dataease/dataease","https://github.com/dataease/dataease/releases/tag/v1.15.2"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-q4qq-jhjv-7rh2","url":"https://osv.dev/vulnerability/GHSA-q4qq-jhjv-7rh2"}],"summary":"MySQL JDBC deserialization vulnerability"}