{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"5.8.21"}],"component":"cn.hutool:hutool-json","cve_ids":["CVE-2023-42277"],"ecosystem":"Maven","epss":0.00911,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-7p8c-crfr-q93p","id":"tcs_01M5N8JS76J7QE1AHG10FA65TF","modified_at":"2024-02-16T08:22:04.489637Z","published_at":"2023-09-09T00:30:48Z","references":["https://osv.dev/vulnerability/GHSA-7p8c-crfr-q93p","https://nvd.nist.gov/vuln/detail/CVE-2023-42277","https://github.com/dromara/hutool/issues/3285","https://github.com/dromara/hutool/commit/9ba8f9ca5dd32441f2e0f150cb22fa178bb771d3","https://github.com/dromara/hutool"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-7p8c-crfr-q93p#Maven/cn.hutool:hutool-json","url":"https://osv.dev/vulnerability/GHSA-7p8c-crfr-q93p"}],"summary":"hutool Buffer Overflow vulnerability"}