{"action":"Upgrade net.dv8tion:JDA to 6.1.3 or later.","affected":[{"fixed":"6.1.3","introduced":"6.0.0"}],"component":"net.dv8tion:JDA","cve_ids":[],"ecosystem":"Maven","exploited":false,"fixed_versions":["6.1.3"],"ghsa_id":"GHSA-93fv-4pm9-xp28","id":"tcs_01M5N8NYSN0HFZZGCH9F5C3SVJ","modified_at":"2025-12-09T17:36:14.284022Z","published_at":"2025-12-09T17:23:54Z","references":["https://osv.dev/vulnerability/GHSA-93fv-4pm9-xp28","https://github.com/discord-jda/JDA/security/advisories/GHSA-93fv-4pm9-xp28","https://github.com/discord-jda/JDA/commit/bb6d2ce5cf514429327c257f5c6fa95a137e3ab6","https://github.com/discord-jda/JDA"],"severity":{"label":"medium"},"sources":[{"source":"osv","source_id":"GHSA-93fv-4pm9-xp28","url":"https://osv.dev/vulnerability/GHSA-93fv-4pm9-xp28"}],"summary":"JDA (Java Discord API) downloads external URLs when updating message components"}