{"action":"Upgrade org.apache.xmlgraphics:batik to 1.8 or later.","affected":[{"fixed":"1.8","introduced":"1.0"}],"component":"org.apache.xmlgraphics:batik","cve_ids":["CVE-2015-0250"],"ecosystem":"Maven","epss":0.16564,"exploited":false,"fixed_versions":["1.8"],"ghsa_id":"GHSA-wfw6-mmmp-87xm","id":"tcs_01M5N9G9R714XA8T4Z4N3PK0P0","modified_at":"2023-11-08T03:57:48.044518Z","published_at":"2022-05-17T00:28:34Z","references":["https://osv.dev/vulnerability/GHSA-wfw6-mmmp-87xm","https://nvd.nist.gov/vuln/detail/CVE-2015-0250","http://advisories.mageia.org/MGASA-2015-0138.html","http://packetstormsecurity.com/files/130964/Apache-Batik-XXE-Injection.html","http://rhn.redhat.com/errata/RHSA-2016-0041.html","http://rhn.redhat.com/errata/RHSA-2016-0042.html","http://seclists.org/fulldisclosure/2015/Mar/142","http://www-01.ibm.com/support/docview.wss?uid=swg21963275","http://www.debian.org/security/2015/dsa-3205","http://www.mandriva.com/security/advisories?name=MDVSA-2015:203","http://www.securitytracker.com/id/1032781","http://www.ubuntu.com/usn/USN-2548-1","http://xmlgraphics.apache.org/security.html"],"severity":{"label":"medium"},"sources":[{"source":"osv","source_id":"GHSA-wfw6-mmmp-87xm","url":"https://osv.dev/vulnerability/GHSA-wfw6-mmmp-87xm"}],"summary":"Improper Input Validation in Apache Batik"}