{"action":"Upgrade org.springframework.security:spring-security-oauth2-client to 5.2.11 (5.2.x), 5.3.10 (5.3.x), 5.4.7 (5.4.x) or 5.5.1 (5.5.x) or later.","affected":[{"fixed":"5.5.1","introduced":"5.5.0"},{"fixed":"5.4.7","introduced":"5.4.0"},{"fixed":"5.3.10","introduced":"5.3.0"},{"fixed":"5.2.11","introduced":"5.2.0"}],"component":"org.springframework.security:spring-security-oauth2-client","cve_ids":["CVE-2021-22119"],"ecosystem":"Maven","epss":0.06001,"exploited":false,"fixed_versions":["5.5.1","5.4.7","5.3.10","5.2.11"],"ghsa_id":"GHSA-w9jg-gvgr-354m","id":"tcs_01M5N9G120RQ1MACZX7Y2CBEDZ","modified_at":"2023-11-08T04:04:54.193370Z","published_at":"2021-07-02T18:33:34Z","references":["https://osv.dev/vulnerability/GHSA-w9jg-gvgr-354m","https://nvd.nist.gov/vuln/detail/CVE-2021-22119","https://github.com/spring-projects/spring-security/pull/9513","https://github.com/spring-projects/spring-security","https://lists.apache.org/thread.html/r08a449010786e0bcffa4b5781b04fcb55d6eafa62cb79b8347680aad@%3Cissues.nifi.apache.org%3E","https://lists.apache.org/thread.html/r163b3e4e39803882f5be05ee8606b2b9812920e196daa2a82997ce14@%3Cpluto-dev.portals.apache.org%3E","https://lists.apache.org/thread.html/r3868207b967f926819fe3aa8d33f1666429be589bb4a62104a49f4e3@%3Cpluto-dev.portals.apache.org%3E","https://lists.apache.org/thread.html/r390783b3b1c59b978131ac08390bf77fbb3863270cbde59d5b0f5fde@%3Cpluto-dev.portals.apache.org%3E","https://lists.apache.org/thread.html/r89aa1b48a827f5641310305214547f1d6b2101971a49b624737c497f@%3Cpluto-dev.portals.apache.org%3E","https://lists.apache.org/thread.html/ra53677224fe4f04c2599abc88032076faa18dc84b329cdeba85d4cfc@%3Cpluto-scm.portals.apache.org%3E","https://tanzu.vmware.com/security/cve-2021-22119","https://www.oracle.com/security-alerts/cpujan2022.html","https://www.oracle.com/security-alerts/cpujul2022.html"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-w9jg-gvgr-354m#Maven/org.springframework.security:spring-security-oauth2-client","url":"https://osv.dev/vulnerability/GHSA-w9jg-gvgr-354m"}],"summary":"Resource Exhaustion in Spring Security"}