{"action":"Upgrade org.apache.ignite:ignite-core to 2.17.0 or later.","affected":[{"fixed":"2.17.0","introduced":"2.6.0"}],"component":"org.apache.ignite:ignite-core","cve_ids":["CVE-2024-52577"],"ecosystem":"Maven","epss":0.03131,"exploited":false,"fixed_versions":["2.17.0"],"ghsa_id":"GHSA-8355-xj3p-hv6q","id":"tcs_01M5N8KKE22DGCGBN4VJT4WNS0","modified_at":"2026-09-10T03:50:22.735485976Z","published_at":"2025-02-14T12:31:38Z","references":["https://osv.dev/vulnerability/GHSA-8355-xj3p-hv6q","https://nvd.nist.gov/vuln/detail/CVE-2024-52577","https://github.com/apache/ignite/commit/f1d3579eabb2c6f5b11b94d58600afc497a8603d","https://github.com/apache/ignite","https://lists.apache.org/thread/1bst0n27m9kb3b6f6hvlghn182vqb2hh","http://www.openwall.com/lists/oss-security/2025/02/14/2"],"severity":{"label":"critical","score":9},"sources":[{"source":"osv","source_id":"GHSA-8355-xj3p-hv6q","url":"https://osv.dev/vulnerability/GHSA-8355-xj3p-hv6q"}],"summary":"Apache Ignite: Possible RCE when deserializing incoming messages by the server node"}