{"action":"Upgrade io.crate:crate to 5.2.11 (5.2.x), 5.3.8 (5.3.x), 5.4.7 (5.4.x) or 5.5.2 (5.5.x) or later.","affected":[{"fixed":"5.2.11","introduced":"0"},{"fixed":"5.3.8","introduced":"5.3.0"},{"fixed":"5.4.7","introduced":"5.4.0"},{"fixed":"5.5.2","introduced":"5.5.0"}],"component":"io.crate:crate","cve_ids":["CVE-2023-51982"],"ecosystem":"Maven","epss":0.00731,"exploited":false,"fixed_versions":["5.2.11","5.3.8","5.4.7","5.5.2"],"ghsa_id":"GHSA-7mgx-gvjw-m3w3","id":"tcs_01M5N8JNV8BTEY2C9PN0RRY6KG","modified_at":"2024-11-21T04:26:59.277852Z","published_at":"2024-01-30T03:30:30Z","references":["https://osv.dev/vulnerability/GHSA-7mgx-gvjw-m3w3","https://nvd.nist.gov/vuln/detail/CVE-2023-51982","https://github.com/crate/crate/issues/15231","https://github.com/crate/crate/pull/15234","https://github.com/crate/crate/commit/0c166ef083bec4d64dd55c1d8cb9b3dec350d241","https://github.com/crate/crate/commit/5be7b3864137c23305ece10df3f7c311ee50ae4d","https://github.com/crate/crate/commit/b8b4cec49a1c7eb2b5af568400bd571d194dc03e","https://github.com/crate/crate/commit/da59311ca920743ebc58ee64c29cfe5723487f56","https://github.com/crate/crate","https://github.com/pypa/advisory-database/tree/main/vulns/crate/PYSEC-2024-27.yaml"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-7mgx-gvjw-m3w3","url":"https://osv.dev/vulnerability/GHSA-7mgx-gvjw-m3w3"}],"summary":"CrateDB authentication bypass vulnerability"}