{"action":"Upgrade ml.combust.mleap:mleap-runtime_2.12 to 0.23.1 or later.","affected":[{"fixed":"0.23.1","introduced":"0"}],"component":"ml.combust.mleap:mleap-runtime_2.12","cve_ids":["CVE-2023-5245"],"ecosystem":"Maven","exploited":false,"fixed_versions":["0.23.1"],"ghsa_id":"GHSA-897x-xvj8-42rq","id":"tcs_01M5N8MC61GYQPKBDEPVC6MEZM","modified_at":"2024-02-20T05:31:38.165692Z","published_at":"2023-11-15T15:30:21Z","references":["https://osv.dev/vulnerability/GHSA-897x-xvj8-42rq","https://nvd.nist.gov/vuln/detail/CVE-2023-5245","https://github.com/combust/mleap/pull/866#issuecomment-1738032225","https://github.com/combust/mleap","https://research.jfrog.com/vulnerabilities/mleap-path-traversal-rce-xray-532656"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-897x-xvj8-42rq","url":"https://osv.dev/vulnerability/GHSA-897x-xvj8-42rq"}],"summary":"Zip slip in mleap"}