Maven/org.mvel:mvel2 CVE-2023-51079: medium 5.3, EPSS 0.74%

mvel2 TimeOut error exists in the ParseTools.subCompileExpression method

Action: No fix published. Pin and monitor.

Affected

No affected ranges in the source.

Fixed versions

No fixed version in the source.

Sources

• osv: GHSA-h63j-xqx6-w58r
• https://nvd.nist.gov/vuln/detail/CVE-2023-51079
• https://github.com/mvel/mvel/issues/348
• https://github.com/mvel/mvel/issues/348#issuecomment-1874047271
• https://github.com/mvel/mvel

CVE-2023-51079 · published 2023-12-27T21:31:01Z · modified 2024-01-08T15:54:10Z · JSON