{"action":"No fix published. Pin and monitor.","affected":[],"component":"org.ninjaframework:ninja-core","cve_ids":["CVE-2024-36823"],"ecosystem":"Maven","epss":0.0078,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-92wp-jghr-hh87","id":"tcs_01M5N8NW1P5DEWY4GS1A40FCY2","modified_at":"2024-06-07T19:59:12.586366Z","published_at":"2024-06-07T00:30:37Z","references":["https://osv.dev/vulnerability/GHSA-92wp-jghr-hh87","https://nvd.nist.gov/vuln/detail/CVE-2024-36823","https://github.com/ninjaframework/ninja/issues/759","https://github.com/ninjaframework/ninja"],"severity":{"label":"medium"},"sources":[{"source":"osv","source_id":"GHSA-92wp-jghr-hh87","url":"https://osv.dev/vulnerability/GHSA-92wp-jghr-hh87"}],"summary":"Weak encryption in Ninja Core"}