{"action":"Upgrade org.apache.brooklyn:brooklyn to 0.10.0 or later.","affected":[{"fixed":"0.10.0","introduced":"0"}],"component":"org.apache.brooklyn:brooklyn","cve_ids":["CVE-2016-8744"],"ecosystem":"Maven","epss":0.03825,"exploited":false,"fixed_versions":["0.10.0"],"ghsa_id":"GHSA-9cqh-5x6g-wgm9","id":"tcs_01M5N8PTA4KC7FTSWAEXZR5B0Z","modified_at":"2023-11-08T03:58:36.958644Z","published_at":"2022-05-17T00:36:06Z","references":["https://osv.dev/vulnerability/GHSA-9cqh-5x6g-wgm9","https://nvd.nist.gov/vuln/detail/CVE-2016-8744","https://brooklyn.apache.org/community/security/CVE-2016-8744.html","https://lists.apache.org/thread.html/3f4d09c1c1a3cdfd1da0a05c8362769b917c078eed5b6c2f8e37a761@%3Cdev.brooklyn.apache.org%3E"],"severity":{"label":"high","score":8.8},"sources":[{"source":"osv","source_id":"GHSA-9cqh-5x6g-wgm9","url":"https://osv.dev/vulnerability/GHSA-9cqh-5x6g-wgm9"}],"summary":"Deserialization of Untrusted Data in Apache Brooklyn"}