{"action":"Upgrade org.apache.tika:tika-core to 1.28.3 or later.","affected":[{"fixed":"1.28.3","introduced":"1.17"}],"component":"org.apache.tika:tika-core","cve_ids":["CVE-2022-30973"],"ecosystem":"Maven","epss":0.01982,"exploited":false,"fixed_versions":["1.28.3"],"ghsa_id":"GHSA-qw3f-w4pf-jh5f","id":"tcs_01M5N9ABNCP2VWVV0NKFMJKN7Y","modified_at":"2024-02-16T08:18:12.752176Z","published_at":"2022-06-01T00:00:36Z","references":["https://osv.dev/vulnerability/GHSA-qw3f-w4pf-jh5f","https://nvd.nist.gov/vuln/detail/CVE-2022-30973","https://github.com/apache/tika/commit/a36711610fa1f6f5ba0f594803415af795e0b265","https://github.com/apache/tika/commit/e76302196ebcafb7b51fce37fbe8256e6c0fbc51","https://github.com/advisories/GHSA-rpjm-422r-95mh","https://github.com/apache/tika","https://lists.apache.org/thread/gqvb5t4p7tmdpl0y5bdbf72pgxj04h7p","https://security.netapp.com/advisory/ntap-20220722-0004","http://www.openwall.com/lists/oss-security/2022/05/31/2","http://www.openwall.com/lists/oss-security/2022/06/27/5"],"severity":{"label":"medium","score":5.5},"sources":[{"source":"osv","source_id":"GHSA-qw3f-w4pf-jh5f","url":"https://osv.dev/vulnerability/GHSA-qw3f-w4pf-jh5f"}],"summary":"Regular expression denial of service in apache tika"}