{"action":"Upgrade com.thoughtworks.xstream:xstream to 1.4.10 or later.","affected":[{"fixed":"1.4.10","introduced":"0"}],"component":"com.thoughtworks.xstream:xstream","cve_ids":["CVE-2017-7957"],"ecosystem":"Maven","epss":0.04928,"exploited":false,"fixed_versions":["1.4.10"],"ghsa_id":"GHSA-7hwc-46rm-65jh","id":"tcs_01M5N8JG749ZXT1DP8PJPXTVPG","modified_at":"2025-05-23T19:46:57.847104Z","published_at":"2020-06-30T22:48:24Z","references":["https://osv.dev/vulnerability/GHSA-7hwc-46rm-65jh","https://nvd.nist.gov/vuln/detail/CVE-2017-7957","https://github.com/x-stream/xstream/commit/6e546ec366419158b1e393211be6d78ab9604ab","https://github.com/x-stream/xstream/commit/8542d02d9ac5d384c85f4b33d6c1888c53bd55d","https://github.com/x-stream/xstream/commit/b3570be2f39234e61f99f9a20640756ea71b1b4","https://access.redhat.com/errata/RHSA-2017:1832","https://access.redhat.com/errata/RHSA-2017:2888","https://access.redhat.com/errata/RHSA-2017:2889","https://exchange.xforce.ibmcloud.com/vulnerabilities/125800","https://github.com/x-stream/xstream","https://www-prd-trops.events.ibm.com/node/715749","http://www.debian.org/security/2017/dsa-3841","http://www.securityfocus.com/bid/100687","http://www.securitytracker.com/id/1039499","http://x-stream.github.io/CVE-2017-7957.html"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-7hwc-46rm-65jh","url":"https://osv.dev/vulnerability/GHSA-7hwc-46rm-65jh"}],"summary":"Denial of service in XStream"}