{"action":"Upgrade org.testng:testng to 7.5.1 (7.5.x) or 7.7.0 (7.7.x) or later.","affected":[{"fixed":"7.5.1","introduced":"6.13"},{"fixed":"7.7.0","introduced":"7.6.0"}],"component":"org.testng:testng","cve_ids":["CVE-2022-4065"],"ecosystem":"Maven","epss":0.00969,"exploited":false,"fixed_versions":["7.5.1","7.7.0"],"ghsa_id":"GHSA-rc2q-x9mf-w3vf","id":"tcs_01M5N9BEK3J36KD59JPQF0N1JK","modified_at":"2023-11-08T04:10:24.506184Z","published_at":"2022-11-19T21:30:25Z","references":["https://osv.dev/vulnerability/GHSA-rc2q-x9mf-w3vf","https://nvd.nist.gov/vuln/detail/CVE-2022-4065","https://github.com/cbeust/testng/pull/1596","https://github.com/cbeust/testng/pull/2806","https://github.com/testng-team/testng/pull/2899","https://github.com/cbeust/testng/commit/9150736cd2c123a6a3b60e6193630859f9f0422b","https://github.com/cbeust/testng","https://github.com/cbeust/testng/releases/tag/7.7.0","https://github.com/cbeust/testng/releases/tag/7.7.1","https://github.com/testng-team/testng/releases/tag/7.5.1","https://vuldb.com/?ctiid.214027","https://vuldb.com/?id.214027"],"severity":{"label":"high","score":7.8},"sources":[{"source":"osv","source_id":"GHSA-rc2q-x9mf-w3vf","url":"https://osv.dev/vulnerability/GHSA-rc2q-x9mf-w3vf"}],"summary":"TestNG is vulnerable to Path Traversal"}