{"action":"Upgrade io.ktor:ktor-client-core-jvm to 2.3.13 or later.","affected":[{"fixed":"2.3.13","introduced":"0"}],"component":"io.ktor:ktor-client-core-jvm","cve_ids":["CVE-2024-49580"],"ecosystem":"Maven","epss":0.00352,"exploited":false,"fixed_versions":["2.3.13"],"ghsa_id":"GHSA-8qv4-773j-c979","id":"tcs_01M5N8N9G9BS64460F04X5VEDV","modified_at":"2024-12-06T18:34:46.109359Z","published_at":"2024-10-17T15:31:08Z","references":["https://osv.dev/vulnerability/GHSA-8qv4-773j-c979","https://nvd.nist.gov/vuln/detail/CVE-2024-49580","https://github.com/ktorio/ktor/pull/4337","https://github.com/ktorio/ktor/pull/4368","https://github.com/ktorio/ktor/commit/0665736fc35c8ab5525241e975f36819b67f9d3e","https://github.com/ktorio/ktor/commit/d6c3a51df169c163e8f0b9ce77bbe543c70116ac","https://github.com/ktorio/ktor","https://github.com/ktorio/ktor/releases/tag/2.3.13","https://www.jetbrains.com/privacy-security/issues-fixed","https://youtrack.jetbrains.com/issue/KTOR-7483"],"severity":{"label":"medium","score":5.3},"sources":[{"source":"osv","source_id":"GHSA-8qv4-773j-c979","url":"https://osv.dev/vulnerability/GHSA-8qv4-773j-c979"}],"summary":"JetBrains Ktor information disclosure"}