{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"2.3.2"}],"component":"com.github.penggle:kaptcha","cve_ids":["CVE-2018-18531"],"ecosystem":"Maven","epss":0.01468,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-8q89-pwhh-7wfq","id":"tcs_01M5N8N78H61T8RTY1286AERKX","modified_at":"2023-11-08T04:00:05.731213Z","published_at":"2018-10-23T16:08:56Z","references":["https://osv.dev/vulnerability/GHSA-8q89-pwhh-7wfq","https://nvd.nist.gov/vuln/detail/CVE-2018-18531","https://github.com/penggle/kaptcha/issues/3","https://github.com/advisories/GHSA-8q89-pwhh-7wfq","https://github.com/penggle/kaptcha"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-8q89-pwhh-7wfq","url":"https://osv.dev/vulnerability/GHSA-8q89-pwhh-7wfq"}],"summary":"Use of Insufficiently Random Values in penggle:kaptcha"}