{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"4.0.0-M1","last_affected":"4.4.2"}],"component":"io.fabric8:fabric8-maven-plugin","cve_ids":["CVE-2020-10721"],"ecosystem":"Maven","epss":0.0058,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-w7gj-h6f2-x4c6","id":"tcs_01M5N9FVKBZ6Z0S9BB2MBZM1B3","modified_at":"2024-02-29T00:26:38.429270Z","published_at":"2022-05-24T17:31:56Z","references":["https://osv.dev/vulnerability/GHSA-w7gj-h6f2-x4c6","https://nvd.nist.gov/vuln/detail/CVE-2020-10721","https://bugzilla.redhat.com/show_bug.cgi?id=1827201","https://github.com/fabric8io/fabric8-maven-plugin"],"severity":{"label":"high","score":7.8},"sources":[{"source":"osv","source_id":"GHSA-w7gj-h6f2-x4c6","url":"https://osv.dev/vulnerability/GHSA-w7gj-h6f2-x4c6"}],"summary":"fabric8-maven-plugin: insecure way to construct Yaml Object leading to remote code execution"}