{"action":"Upgrade org.apereo.cas:cas-server-core-services-api to 6.1.0-RC5 or later.","affected":[{"fixed":"6.1.0-RC5","introduced":"0"}],"component":"org.apereo.cas:cas-server-core-services-api","cve_ids":["CVE-2019-10754"],"ecosystem":"Maven","epss":0.01767,"exploited":false,"fixed_versions":["6.1.0-RC5"],"ghsa_id":"GHSA-g24w-373r-5pxg","id":"tcs_01M5N8X0SPQ0SWGEXVAWX8BKN7","modified_at":"2025-01-14T07:14:26.961906Z","published_at":"2022-05-24T16:56:41Z","references":["https://osv.dev/vulnerability/GHSA-g24w-373r-5pxg","https://nvd.nist.gov/vuln/detail/CVE-2019-10754","https://github.com/apereo/cas/commit/40bf278e66786544411c471de5123e7a71826b9f","https://github.com/apereo/cas","https://snyk.io/vuln/SNYK-JAVA-ORGAPEREOCAS-467402","https://snyk.io/vuln/SNYK-JAVA-ORGAPEREOCAS-467404","https://snyk.io/vuln/SNYK-JAVA-ORGAPEREOCAS-467406","https://snyk.io/vuln/SNYK-JAVA-ORGAPEREOCAS-468868","https://snyk.io/vuln/SNYK-JAVA-ORGAPEREOCAS-468869"],"severity":{"label":"high","score":8.1},"sources":[{"source":"osv","source_id":"GHSA-g24w-373r-5pxg#Maven/org.apereo.cas:cas-server-core-services-api","url":"https://osv.dev/vulnerability/GHSA-g24w-373r-5pxg"}],"summary":"Use of Insufficiently Random Values in Apereo CAS"}