{"action":"Upgrade com.mchange:c3p0 to 0.9.5.4 or later.","affected":[{"fixed":"0.9.5.4","introduced":"0"}],"component":"com.mchange:c3p0","cve_ids":["CVE-2019-5427"],"ecosystem":"Maven","epss":0.04882,"exploited":false,"fixed_versions":["0.9.5.4"],"ghsa_id":"GHSA-84p2-vf58-xhxv","id":"tcs_01M5N8KRQEXYDJDPNX652AAXGX","modified_at":"2024-02-16T08:07:45.873484Z","published_at":"2019-04-23T16:03:18Z","references":["https://osv.dev/vulnerability/GHSA-84p2-vf58-xhxv","https://nvd.nist.gov/vuln/detail/CVE-2019-5427","https://hackerone.com/reports/509315","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/BFIVX6HOVNLAM7W3SUAMHYRNLCVQSAWR","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MQ47OFV57Y2DAHMGA5H3JOL4WHRWRFN4","https://www.oracle.com/security-alerts/cpuapr2020.html","https://www.oracle.com/security-alerts/cpujan2021.html","https://www.oracle.com/security-alerts/cpujul2020.html","https://www.oracle.com/security-alerts/cpuoct2020.html","https://www.oracle.com/security-alerts/cpuoct2021.html"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-84p2-vf58-xhxv","url":"https://osv.dev/vulnerability/GHSA-84p2-vf58-xhxv"}],"summary":"Billion laughs attack in c3p0"}