{"action":"Upgrade org.springframework:spring-webflux to 6.1.14 or later.","affected":[{"fixed":"6.1.14","introduced":"6.1.0"},{"introduced":"0","last_affected":"5.3.40"},{"introduced":"6.0.0","last_affected":"6.0.24"}],"component":"org.springframework:spring-webflux","cve_ids":["CVE-2024-38819"],"ecosystem":"Maven","epss":0.5604,"exploited":false,"fixed_versions":["6.1.14"],"ghsa_id":"GHSA-g5vr-rgqm-vf78","id":"tcs_01M5N8XFE6A9QV3CF8MNXYJM2V","modified_at":"2026-09-28T16:00:23.315362856Z","published_at":"2024-12-19T18:31:38Z","references":["https://osv.dev/vulnerability/GHSA-g5vr-rgqm-vf78","https://nvd.nist.gov/vuln/detail/CVE-2024-38819","https://github.com/spring-projects/spring-framework/issues/33689","https://github.com/spring-projects/spring-framework/commit/3bfbe30a7814c9ea1556d40df9bd87ddb3ba372d","https://github.com/spring-projects/spring-framework/commit/fb7890d73975a3d9e0763e0926df2bd0a608e87e","https://github.com/spring-projects/spring-framework","https://security.netapp.com/advisory/ntap-20250110-0010","https://spring.io/security/cve-2024-38819"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-g5vr-rgqm-vf78","url":"https://osv.dev/vulnerability/GHSA-g5vr-rgqm-vf78"}],"summary":"Spring Framework Path Traversal vulnerability"}