{"action":"Upgrade org.apache.wicket:wicket-core to 8.17.0 (8.x), 9.19.0 (9.x) or 10.3.0 (10.x) or later.","affected":[{"fixed":"8.17.0","introduced":"7.0.0"},{"fixed":"10.3.0","introduced":"10.0.0"},{"fixed":"9.19.0","introduced":"9.0.0-M1"}],"component":"org.apache.wicket:wicket-core","cve_ids":["CVE-2024-53299"],"ecosystem":"Maven","epss":0.01502,"exploited":false,"fixed_versions":["8.17.0","10.3.0","9.19.0"],"ghsa_id":"GHSA-9cxr-76pm-j3wf","id":"tcs_01M5N8PTRMWK3S1RVS61MEPMQG","modified_at":"2025-03-11T16:24:16Z","published_at":"2025-01-23T09:31:17Z","references":["https://osv.dev/vulnerability/GHSA-9cxr-76pm-j3wf","https://nvd.nist.gov/vuln/detail/CVE-2024-53299","https://github.com/apache/wicket","https://lists.apache.org/thread/gyp2ht00c62827y0379lxh5dbx3hhho5","https://wicket.apache.org/news/2025/01/31/wicket-8.17.0-released.html","http://www.openwall.com/lists/oss-security/2025/01/22/12"],"severity":{"label":"medium","score":6.5},"sources":[{"source":"osv","source_id":"GHSA-9cxr-76pm-j3wf","url":"https://osv.dev/vulnerability/GHSA-9cxr-76pm-j3wf"}],"summary":"Apache Wicket: An attacker can intentionally trigger a memory leak"}