{"action":"Upgrade io.dropwizard:dropwizard-validation to 1.3.21 (1.x) or 2.0.3 (2.x) or later.","affected":[{"fixed":"1.3.21","introduced":"0"},{"fixed":"2.0.3","introduced":"2.0.0"}],"component":"io.dropwizard:dropwizard-validation","cve_ids":["CVE-2020-11002"],"ecosystem":"Maven","exploited":false,"fixed_versions":["1.3.21","2.0.3"],"ghsa_id":"GHSA-8jpx-m2wh-2v34","id":"tcs_01M5N8MZN5BHMR7MYGVRDVCKY3","modified_at":"2026-02-04T02:54:30.702612Z","published_at":"2020-04-10T18:42:20Z","references":["https://osv.dev/vulnerability/GHSA-8jpx-m2wh-2v34","https://github.com/dropwizard/dropwizard/security/advisories/GHSA-3mcp-9wr4-cjqf","https://github.com/dropwizard/dropwizard/security/advisories/GHSA-8jpx-m2wh-2v34","https://nvd.nist.gov/vuln/detail/CVE-2020-11002","https://github.com/dropwizard/dropwizard/pull/3208","https://github.com/dropwizard/dropwizard/pull/3209","https://github.com/dropwizard/dropwizard/commit/d5a512f7abf965275f2a6b913ac4fe778e424242","https://docs.jboss.org/hibernate/validator/6.1/reference/en-US/html_single/#section-hibernateconstraintvalidatorcontext","https://github.com/dropwizard/dropwizard/security/policy#reporting-a-vulnerability"],"severity":{"label":"high","score":8},"sources":[{"source":"osv","source_id":"GHSA-8jpx-m2wh-2v34","url":"https://osv.dev/vulnerability/GHSA-8jpx-m2wh-2v34"}],"summary":"Remote Code Execution (RCE) vulnerability in dropwizard-validation"}