{"action":"Upgrade fr.turri:aXMLRPC to 1.12.1 or later.","affected":[{"fixed":"1.12.1","introduced":"0"}],"component":"fr.turri:aXMLRPC","cve_ids":["CVE-2020-36641"],"ecosystem":"Maven","epss":0.00883,"exploited":false,"fixed_versions":["1.12.1"],"ghsa_id":"GHSA-g4r8-28fp-f255","id":"tcs_01M5N8XAEZEP3EQ7K86081TPJG","modified_at":"2024-02-16T08:18:11.151581Z","published_at":"2023-01-05T12:30:27Z","references":["https://osv.dev/vulnerability/GHSA-g4r8-28fp-f255","https://nvd.nist.gov/vuln/detail/CVE-2020-36641","https://github.com/gturri/aXMLRPC/commit/456752ebc1ef4c0db980cb5b01a0b3cd0a9e0bae","https://github.com/gturri/aXMLRPC/commit/ad6615b3ec41353e614f6ea5fdd5b046442a832b","https://github.com/gturri/aXMLRPC","https://github.com/gturri/aXMLRPC/releases/tag/aXMLRPC-1.12.1","https://github.com/gturri/aXMLRPC/releases/tag/aXMLRPC-1.14.0","https://vuldb.com/?ctiid.217450","https://vuldb.com/?id.217450"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-g4r8-28fp-f255","url":"https://osv.dev/vulnerability/GHSA-g4r8-28fp-f255"}],"summary":"aXMLRPC XML External Entity vulnerability"}