{"action":"Upgrade org.springframework:spring-messaging to 5.2.22.RELEASE (5.2.x) or 5.3.20 (5.3.x) or later.","affected":[{"fixed":"5.3.20","introduced":"5.3.0"},{"fixed":"5.2.22.RELEASE","introduced":"0"}],"component":"org.springframework:spring-messaging","cve_ids":["CVE-2022-22971"],"ecosystem":"Maven","epss":0.03174,"exploited":false,"fixed_versions":["5.3.20","5.2.22.RELEASE"],"ghsa_id":"GHSA-rqph-vqwm-22vc","id":"tcs_01M5N9CB8RA3GCPAKDMVKZX73H","modified_at":"2024-03-14T21:05:11.004569Z","published_at":"2022-05-13T00:00:29Z","references":["https://osv.dev/vulnerability/GHSA-rqph-vqwm-22vc","https://nvd.nist.gov/vuln/detail/CVE-2022-22971","https://github.com/spring-projects/spring-framework/commit/159a99bbafdd6c01871228113d7042c3f83f360f","https://github.com/spring-projects/spring-framework/commit/dc2947c52df18d5e99cad03383f7d6ba13d031fd","https://github.com/spring-projects/spring-framework","https://security.netapp.com/advisory/ntap-20220616-0003","https://tanzu.vmware.com/security/cve-2022-22971","https://www.oracle.com/security-alerts/cpujul2022.html"],"severity":{"label":"medium","score":6.5},"sources":[{"source":"osv","source_id":"GHSA-rqph-vqwm-22vc","url":"https://osv.dev/vulnerability/GHSA-rqph-vqwm-22vc"}],"summary":"Allocation of Resources Without Limits or Throttling in Spring Framework"}