{"action":"Upgrade org.apache.qpid:proton-j to 0.30.0 or later.","affected":[{"fixed":"0.30.0","introduced":"0.3"}],"component":"org.apache.qpid:proton-j","cve_ids":["CVE-2018-17187"],"ecosystem":"Maven","epss":0.02539,"exploited":false,"fixed_versions":["0.30.0"],"ghsa_id":"GHSA-xvch-r4wf-h8w9","id":"tcs_01M5N9K08TH43M3P9AWAM97NXQ","modified_at":"2024-03-04T21:49:22.732748Z","published_at":"2018-11-21T22:22:21Z","references":["https://osv.dev/vulnerability/GHSA-xvch-r4wf-h8w9","https://nvd.nist.gov/vuln/detail/CVE-2018-17187","https://github.com/apache/qpid-proton-j/commit/0cb8ca03cec42120dcfc434561592d89a89a805e","https://github.com/advisories/GHSA-xvch-r4wf-h8w9","https://issues.apache.org/jira/browse/PROTON-1962","https://mail-archives.apache.org/mod_mbox/qpid-users/201811.mbox/%3CCAFitrpQSV73Vz7rJYfLJK7gvEymZSCR5ooWUeU8j4jzRydk-eg%40mail.gmail.com%3E","https://qpid.apache.org/cves/CVE-2018-17187.html","http://www.securityfocus.com/bid/105935"],"severity":{"label":"high","score":7.4},"sources":[{"source":"osv","source_id":"GHSA-xvch-r4wf-h8w9","url":"https://osv.dev/vulnerability/GHSA-xvch-r4wf-h8w9"}],"summary":"Improper Certificate Validation in proton-j"}