{"action":"Upgrade org.jboss.resteasy:resteasy-client to 3.0.20.Final (3.0.x) or 3.1.0.CR1 (3.1.x) or later.","affected":[{"fixed":"3.0.20.Final","introduced":"0"},{"fixed":"3.1.0.CR1","introduced":"3.1.0.Beta1"}],"component":"org.jboss.resteasy:resteasy-client","cve_ids":["CVE-2016-6347"],"ecosystem":"Maven","epss":0.01866,"exploited":false,"fixed_versions":["3.0.20.Final","3.1.0.CR1"],"ghsa_id":"GHSA-r346-rmrg-qpgh","id":"tcs_01M5N9ARYWFW9RBFSD9GBQR76C","modified_at":"2023-11-08T03:58:32.557045Z","published_at":"2022-05-17T02:48:28Z","references":["https://osv.dev/vulnerability/GHSA-r346-rmrg-qpgh","https://nvd.nist.gov/vuln/detail/CVE-2016-6347","https://bugzilla.redhat.com/show_bug.cgi?id=1372124","http://www.securityfocus.com/bid/92759"],"severity":{"label":"medium","score":6.1},"sources":[{"source":"osv","source_id":"GHSA-r346-rmrg-qpgh","url":"https://osv.dev/vulnerability/GHSA-r346-rmrg-qpgh"}],"summary":"Improper Neutralization of Input During Web Page Generation in RESTEasy"}