{"action":"Upgrade com.sparkjava:spark-core to 2.7.2 or later.","affected":[{"fixed":"2.7.2","introduced":"0"}],"component":"com.sparkjava:spark-core","cve_ids":["CVE-2018-9159"],"ecosystem":"Maven","epss":0.04445,"exploited":false,"fixed_versions":["2.7.2"],"ghsa_id":"GHSA-76qr-mmh8-cp8f","id":"tcs_01M5N8HNEREDPTYAZM4ATEC10Z","modified_at":"2023-11-08T04:00:30.080342Z","published_at":"2018-10-19T16:56:00Z","references":["https://osv.dev/vulnerability/GHSA-76qr-mmh8-cp8f","https://nvd.nist.gov/vuln/detail/CVE-2018-9159","https://github.com/perwendel/spark/issues/981","https://github.com/perwendel/spark/commit/030e9d00125cbd1ad759668f85488aba1019c668","https://github.com/perwendel/spark/commit/a221a864db28eb736d36041df2fa6eb8839fc5cd","https://github.com/perwendel/spark/commit/ce9e11517eca69e58ed4378d1e47a02bd06863cc","https://access.redhat.com/errata/RHSA-2018:2020","https://access.redhat.com/errata/RHSA-2018:2405","https://github.com/advisories/GHSA-76qr-mmh8-cp8f","https://github.com/perwendel/spark","http://sparkjava.com/news#spark-272-released"],"severity":{"label":"medium","score":5.3},"sources":[{"source":"osv","source_id":"GHSA-76qr-mmh8-cp8f","url":"https://osv.dev/vulnerability/GHSA-76qr-mmh8-cp8f"}],"summary":"Moderate severity vulnerability that affects com.sparkjava:spark-core"}