{"action":"Upgrade edu.stanford.nlp:stanford-corenlp to 4.4.0 or later.","affected":[{"fixed":"4.4.0","introduced":"0"}],"component":"edu.stanford.nlp:stanford-corenlp","cve_ids":["CVE-2021-44550"],"ecosystem":"Maven","epss":0.01294,"exploited":false,"fixed_versions":["4.4.0"],"ghsa_id":"GHSA-x2p8-rgfm-qw3v","id":"tcs_01M5N9HHJNXHCAH4A01Z0JXKHW","modified_at":"2023-11-08T04:07:17.412828Z","published_at":"2022-02-25T00:01:07Z","references":["https://osv.dev/vulnerability/GHSA-x2p8-rgfm-qw3v","https://nvd.nist.gov/vuln/detail/CVE-2021-44550","https://github.com/stanfordnlp/CoreNLP/issues/1222","https://github.com/stanfordnlp/CoreNLP/commit/5ee097dbede547023e88f60ed3f430ff09398b87","https://github.com/stanfordnlp/CoreNLP"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-x2p8-rgfm-qw3v","url":"https://osv.dev/vulnerability/GHSA-x2p8-rgfm-qw3v"}],"summary":"Access Control vulnerability within CoreNLP"}