{"action":"Upgrade com.alipay.sofa:rpc-sofa-boot-starter to 5.12.0 or later.","affected":[{"fixed":"5.12.0","introduced":"0"}],"component":"com.alipay.sofa:rpc-sofa-boot-starter","cve_ids":["CVE-2024-23636"],"ecosystem":"Maven","epss":0.00799,"exploited":false,"fixed_versions":["5.12.0"],"ghsa_id":"GHSA-7q8p-9953-pxvr","id":"tcs_01M5N8JXX5S3RYWETX1G8EP50M","modified_at":"2026-09-10T03:50:09.323713869Z","published_at":"2024-01-23T20:10:20Z","references":["https://osv.dev/vulnerability/GHSA-7q8p-9953-pxvr","https://github.com/sofastack/sofa-rpc/security/advisories/GHSA-7q8p-9953-pxvr","https://nvd.nist.gov/vuln/detail/CVE-2024-23636","https://github.com/sofastack/sofa-rpc/commit/42d19b1b1d14a25aafd9ef7c219c04a19f90fc76","https://github.com/sofastack/sofa-rpc/commit/d08e25824ae9feaf0876adba9acd2938f34759b1","https://github.com/sofastack/sofa-rpc"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-7q8p-9953-pxvr","url":"https://osv.dev/vulnerability/GHSA-7q8p-9953-pxvr"}],"summary":"Remote Command Execution in SOFARPC"}