{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"5.8.10"}],"component":"cn.hutool:hutool-json","cve_ids":["CVE-2022-45689"],"ecosystem":"Maven","epss":0.00799,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-fxrc-hg6j-6v3x","id":"tcs_01M5N8WZMP17GTDKKKE0JG70R7","modified_at":"2024-11-30T05:52:06.543634Z","published_at":"2022-12-13T15:30:26Z","references":["https://osv.dev/vulnerability/GHSA-fxrc-hg6j-6v3x","https://nvd.nist.gov/vuln/detail/CVE-2022-45689","https://github.com/dromara/hutool/issues/2747","https://github.com/dromara/hutool"],"severity":{"label":"low"},"sources":[{"source":"osv","source_id":"GHSA-fxrc-hg6j-6v3x","url":"https://osv.dev/vulnerability/GHSA-fxrc-hg6j-6v3x"}],"summary":"hutool-json vulnerable to memory exhaustion"}