{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"1.3.2"}],"component":"org.skyscreamer:nevado-jms","cve_ids":["CVE-2023-31826"],"ecosystem":"Maven","epss":0.00315,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-7gm3-mwjw-j53w","id":"tcs_01M5N8JCQ9YNENX201DJRRAGNZ","modified_at":"2025-01-17T20:58:09.808366Z","published_at":"2023-05-23T03:30:16Z","references":["https://osv.dev/vulnerability/GHSA-7gm3-mwjw-j53w","https://nvd.nist.gov/vuln/detail/CVE-2023-31826","https://github.com/skyscreamer/nevado/issues/121","https://github.com/skyscreamer/nevado","https://github.com/skyscreamer/nevado/releases","https://novysodope.github.io/2023/04/01/95","http://nevado.skyscreamer.org"],"severity":{"label":"high","score":7.8},"sources":[{"source":"osv","source_id":"GHSA-7gm3-mwjw-j53w","url":"https://osv.dev/vulnerability/GHSA-7gm3-mwjw-j53w"}],"summary":"Command injection in nevado-jms"}