{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"3.7.2"}],"component":"org.apache.james:james-server","cve_ids":["CVE-2022-45935"],"ecosystem":"Maven","epss":0.0037,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-v6vp-62vc-84qw","id":"tcs_01M5N9DEDAS12YT40GGASX3F5V","modified_at":"2026-09-10T03:49:51.705116929Z","published_at":"2023-01-06T12:31:34Z","references":["https://osv.dev/vulnerability/GHSA-v6vp-62vc-84qw","https://nvd.nist.gov/vuln/detail/CVE-2022-45935","https://github.com/apache/james-project/commit/b5580d13d6c74ecbf647127eff1a3ac1086f5493","https://github.com/apache/james-project","https://lists.apache.org/thread/j61fo8xc1rxtofrn8vc33whx35s9cj1d"],"severity":{"label":"medium","score":5.5},"sources":[{"source":"osv","source_id":"GHSA-v6vp-62vc-84qw","url":"https://osv.dev/vulnerability/GHSA-v6vp-62vc-84qw"}],"summary":"Apache James server allows an attacker with local access to access private user data in transit"}