{"action":"Upgrade org.springframework.integration:spring-integration-zip to 1.0.4 or later.","affected":[{"fixed":"1.0.4","introduced":"0"}],"component":"org.springframework.integration:spring-integration-zip","cve_ids":["CVE-2021-22114"],"ecosystem":"Maven","epss":0.01038,"exploited":false,"fixed_versions":["1.0.4"],"ghsa_id":"GHSA-vw83-h3mq-3qwj","id":"tcs_01M5N9EXQR328VSHXNPDZVAC15","modified_at":"2023-11-08T04:04:53.949500Z","published_at":"2022-03-18T17:40:44Z","references":["https://osv.dev/vulnerability/GHSA-vw83-h3mq-3qwj","https://nvd.nist.gov/vuln/detail/CVE-2021-22114","https://tanzu.vmware.com/security/cve-2021-22114"],"severity":{"label":"medium","score":5.3},"sources":[{"source":"osv","source_id":"GHSA-vw83-h3mq-3qwj","url":"https://osv.dev/vulnerability/GHSA-vw83-h3mq-3qwj"}],"summary":"Path Traversal in Spring-integration-zip"}