{"action":"Upgrade io.github.skylot:jadx-core to 1.3.2 or later.","affected":[{"fixed":"1.3.2","introduced":"0"}],"component":"io.github.skylot:jadx-core","cve_ids":["CVE-2022-0219"],"ecosystem":"Maven","epss":0.01054,"exploited":false,"fixed_versions":["1.3.2"],"ghsa_id":"GHSA-r8j4-96mx-rjcc","id":"tcs_01M5N9B8VXVX9GTZSBMX7B13DG","modified_at":"2023-11-08T04:07:29.839424Z","published_at":"2022-01-21T18:13:42Z","references":["https://osv.dev/vulnerability/GHSA-r8j4-96mx-rjcc","https://nvd.nist.gov/vuln/detail/CVE-2022-0219","https://github.com/skylot/jadx/commit/d22db30166e7cb369d72be41382bb63ac8b81c52","https://github.com/skylot/jadx","https://huntr.dev/bounties/0d093863-29e8-4dd7-a885-64f76d50bf5e"],"severity":{"label":"medium","score":5.5},"sources":[{"source":"osv","source_id":"GHSA-r8j4-96mx-rjcc","url":"https://osv.dev/vulnerability/GHSA-r8j4-96mx-rjcc"}],"summary":"Improper Restriction of XML External Entity Reference in skylot/jadx"}