{"action":"Upgrade de.codecentric:spring-boot-admin to 2.6.10 (2.6.x), 2.7.8 (2.7.x) or 3.0.0-M6 (3.0.x) or later.","affected":[{"fixed":"2.6.10","introduced":"0"},{"fixed":"2.7.8","introduced":"2.7.0"},{"fixed":"3.0.0-M6","introduced":"3.0.0-M1"}],"component":"de.codecentric:spring-boot-admin","cve_ids":["CVE-2022-46166"],"ecosystem":"Maven","epss":0.01567,"exploited":false,"fixed_versions":["2.6.10","2.7.8","3.0.0-M6"],"ghsa_id":"GHSA-w3x5-427h-wfq6","id":"tcs_01M5N9FDYYYN5M39EH2ZMP3QT5","modified_at":"2023-11-08T04:10:55.467167Z","published_at":"2022-12-09T20:19:32Z","references":["https://osv.dev/vulnerability/GHSA-w3x5-427h-wfq6","https://github.com/codecentric/spring-boot-admin/security/advisories/GHSA-w3x5-427h-wfq6","https://github.com/codecentric/spring-boot-admin"],"severity":{"label":"high","score":8},"sources":[{"source":"osv","source_id":"GHSA-w3x5-427h-wfq6","url":"https://osv.dev/vulnerability/GHSA-w3x5-427h-wfq6"}],"summary":"Spring Boot Admins integrated notifier support allows arbitrary code execution"}