{"action":"Upgrade org.eclipse.californium:californium-core to 2.7.3 (2.x) or 3.6.0 (3.x) or later.","affected":[{"fixed":"2.7.3","introduced":"2.0.0"},{"fixed":"3.6.0","introduced":"3.0.0"}],"component":"org.eclipse.californium:californium-core","cve_ids":["CVE-2022-2576"],"ecosystem":"Maven","epss":0.00606,"exploited":false,"fixed_versions":["2.7.3","3.6.0"],"ghsa_id":"GHSA-qq3j-44gw-cf6r","id":"tcs_01M5N9A1V1ZVDDCCPD2QQ3KE54","modified_at":"2023-11-08T04:08:47.900072Z","published_at":"2022-07-30T00:00:35Z","references":["https://osv.dev/vulnerability/GHSA-qq3j-44gw-cf6r","https://nvd.nist.gov/vuln/detail/CVE-2022-2576","https://github.com/eclipse-californium/californium/pull/2039","https://github.com/eclipse-californium/californium/commit/0cc953a1dc071efc960130e229fcb4f8bda7f9df","https://github.com/eclipse-californium/californium/commit/8373db84b2d07f22c39ffc333ab881dba9401722","https://bugs.eclipse.org/580018","https://github.com/eclipse/californium"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-qq3j-44gw-cf6r","url":"https://osv.dev/vulnerability/GHSA-qq3j-44gw-cf6r"}],"summary":"Eclipse Californium denial of service (DoS) via Datagram Transport Layer Security (DTLS) handshake on parameter mismatch"}