{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"2.2.9"}],"component":"com.bstek.ureport:ureport2-console","cve_ids":["CVE-2022-25767"],"ecosystem":"Maven","epss":0.03194,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-w39x-chvm-pj3c","id":"tcs_01M5N9F8WQFEGQAEHNYQCRHGRB","modified_at":"2026-03-16T03:12:24.556544Z","published_at":"2022-05-03T00:00:44Z","references":["https://osv.dev/vulnerability/GHSA-w39x-chvm-pj3c","https://nvd.nist.gov/vuln/detail/CVE-2022-25767","https://github.com/JinYiTong/CVE-Req/blob/main/ureport2/ureport2-console.md","https://github.com/youseries/ureport","https://snyk.io/vuln/SNYK-JAVA-COMBSTEKUREPORT-2322018"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-w39x-chvm-pj3c","url":"https://osv.dev/vulnerability/GHSA-w39x-chvm-pj3c"}],"summary":"Deserialization of Untrusted Data in com.bstek.ureport:ureport2-console"}