{"action":"Upgrade org.codehaus.jettison:jettison to 1.5.2 or later.","affected":[{"fixed":"1.5.2","introduced":"0"}],"component":"org.codehaus.jettison:jettison","cve_ids":["CVE-2022-40150"],"ecosystem":"Maven","epss":0.01647,"exploited":false,"fixed_versions":["1.5.2"],"ghsa_id":"GHSA-x27m-9w8j-5vcw","id":"tcs_01M5N9HH35SK9GDKK74AAQKY4J","modified_at":"2026-09-10T03:49:46.116958661Z","published_at":"2022-09-17T00:00:41Z","references":["https://osv.dev/vulnerability/GHSA-x27m-9w8j-5vcw","https://nvd.nist.gov/vuln/detail/CVE-2022-40150","https://github.com/jettison-json/jettison/issues/45","https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=46549","https://github.com/jettison-json/jettison","https://lists.debian.org/debian-lts-announce/2022/12/msg00045.html","https://www.debian.org/security/2023/dsa-5312"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-x27m-9w8j-5vcw","url":"https://osv.dev/vulnerability/GHSA-x27m-9w8j-5vcw"}],"summary":"Jettison memory exhaustion"}