{"action":"Upgrade io.vertx:vertx-grpc-server to 4.5.10 or later.","affected":[{"fixed":"4.5.10","introduced":"4.3.0"}],"component":"io.vertx:vertx-grpc-server","cve_ids":["CVE-2024-8391"],"ecosystem":"Maven","epss":0.0058,"exploited":false,"fixed_versions":["4.5.10"],"ghsa_id":"GHSA-g76f-gjfx-4rpr","id":"tcs_01M5N8XMPK0B4ZW2XCF0P9DMQ5","modified_at":"2024-09-04T20:57:34.532255Z","published_at":"2024-09-04T18:30:58Z","references":["https://osv.dev/vulnerability/GHSA-g76f-gjfx-4rpr","https://nvd.nist.gov/vuln/detail/CVE-2024-8391","https://github.com/eclipse-vertx/vertx-grpc/issues/113","https://github.com/eclipse-vertx/vertx-grpc/commit/a76b14a92410c89fcc590c5852d800b565916ccf","https://github.com/eclipse-vertx/vertx-grpc","https://gitlab.eclipse.org/security/cve-assignement/-/issues/31"],"severity":{"label":"medium","score":5.8},"sources":[{"source":"osv","source_id":"GHSA-g76f-gjfx-4rpr","url":"https://osv.dev/vulnerability/GHSA-g76f-gjfx-4rpr"}],"summary":"Vertx gRPC server does not limit the maximum message size"}