{"action":"Upgrade org.apache.juddi:juddi-core to 3.3.10 or later.","affected":[{"fixed":"3.3.10","introduced":"0"}],"component":"org.apache.juddi:juddi-core","cve_ids":["CVE-2021-37578"],"ecosystem":"Maven","epss":0.04115,"exploited":false,"fixed_versions":["3.3.10"],"ghsa_id":"GHSA-9hx8-2mrv-r674","id":"tcs_01M5N8Q5VJ34J08N4Q668MYMMG","modified_at":"2023-11-08T04:06:18.699518Z","published_at":"2021-08-09T20:41:37Z","references":["https://osv.dev/vulnerability/GHSA-9hx8-2mrv-r674","https://nvd.nist.gov/vuln/detail/CVE-2021-37578","https://github.com/apache/juddi/commit/dd880ffe7694a70cee75efeee79c9197d261866f","https://github.com/apache/juddi","https://lists.apache.org/thread.html/r82047b3ba774cf870ea8e1e9ec51c6107f6cd056d4e36608148c6e71%40%3Cprivate.juddi.apache.org%3E","http://www.openwall.com/lists/oss-security/2021/07/29/1"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-9hx8-2mrv-r674","url":"https://osv.dev/vulnerability/GHSA-9hx8-2mrv-r674"}],"summary":"Deserialization of Untrusted Data in Apache jUDDI"}