{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"1.7.0","last_affected":"1.8.0"}],"component":"org.apache.eventmesh:eventmesh-connector-rabbitmq","cve_ids":["CVE-2023-26512"],"ecosystem":"Maven","epss":0.01359,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-fj8f-56wc-q36r","id":"tcs_01M5N8W4VF8AV1BHH5V0NJH0K0","modified_at":"2024-02-16T08:07:46.581881Z","published_at":"2023-07-17T09:30:23Z","references":["https://osv.dev/vulnerability/GHSA-fj8f-56wc-q36r","https://nvd.nist.gov/vuln/detail/CVE-2023-26512","https://lists.apache.org/thread/zb1d62wh8o8pvntrnx4t1hj8vz0pm39p"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-fj8f-56wc-q36r","url":"https://osv.dev/vulnerability/GHSA-fj8f-56wc-q36r"}],"summary":"rabbitmq-connector plugin module in Apache EventMesh platforms allows attackers to send controlled message"}