CVE-2020-24164
1 advisory.
Maven/com.taoensso:nippy CVE-2020-24164: high 7.8, EPSS 1.11%
Gadget chain attack in Nippy
Action: Upgrade com.taoensso:nippy to 2.14.2 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.14.2 | - |
Fixed versions
| 2.14.2 |
Sources
- osv: GHSA-p5gm-fgfx-hr7h
- https://nvd.nist.gov/vuln/detail/CVE-2020-24164
- https://github.com/ptaoussanis/nippy/issues/130
- https://github.com/ptaoussanis/nippy/commit/61fb009fdde2994140f2da2e495ba8af3a873eb2
CVE-2020-24164 · published · modified · JSON