{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"5.8.11"}],"component":"cn.hutool:hutool-all","cve_ids":["CVE-2023-24162"],"ecosystem":"Maven","epss":0.0127,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-77h8-5j3h-jcjf","id":"tcs_01M5N8HREY6NEMC226H5CV9YNZ","modified_at":"2023-11-08T04:11:43.760194Z","published_at":"2023-01-31T18:30:23Z","references":["https://osv.dev/vulnerability/GHSA-77h8-5j3h-jcjf","https://nvd.nist.gov/vuln/detail/CVE-2023-24162","https://github.com/dromara/hutool/issues/2855","https://gitee.com/dromara/hutool","https://gitee.com/dromara/hutool/issues/I6AEX2"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-77h8-5j3h-jcjf","url":"https://osv.dev/vulnerability/GHSA-77h8-5j3h-jcjf"}],"summary":"Dromara Hutool Deserialization of Untrusted Data vulnerability"}