{"action":"Upgrade org.apache.gobblin:gobblin-core to 0.16.0 or later.","affected":[{"fixed":"0.16.0","introduced":"0"}],"component":"org.apache.gobblin:gobblin-core","cve_ids":["CVE-2021-36152"],"ecosystem":"Maven","epss":0.01302,"exploited":false,"fixed_versions":["0.16.0"],"ghsa_id":"GHSA-q5rx-8c2h-5q7j","id":"tcs_01M5N98SG0E754Z0CBK8TZ1BRY","modified_at":"2024-12-05T05:26:21.425678Z","published_at":"2022-02-06T00:01:07Z","references":["https://osv.dev/vulnerability/GHSA-q5rx-8c2h-5q7j","https://nvd.nist.gov/vuln/detail/CVE-2021-36152","https://lists.apache.org/thread/3bxf7rbf4zh95r78jtgth6gwhr5fyl2j"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-q5rx-8c2h-5q7j","url":"https://osv.dev/vulnerability/GHSA-q5rx-8c2h-5q7j"}],"summary":"Apache Gobblin trusts all certificates used for LDAP connections in Gobblin-as-a-Service"}