{"action":"Upgrade org.eclipse.parsson:project to 1.0.5 (1.0.x) or 1.1.4 (1.1.x) or later.","affected":[{"fixed":"1.1.4","introduced":"1.1.0"},{"fixed":"1.0.5","introduced":"0"}],"component":"org.eclipse.parsson:project","cve_ids":["CVE-2023-4043"],"ecosystem":"Maven","epss":0.0089,"exploited":false,"fixed_versions":["1.1.4","1.0.5"],"ghsa_id":"GHSA-g8p6-p27c-52fx","id":"tcs_01M5N8XRZPVJKH4Y7DVWZQBT08","modified_at":"2024-02-16T08:17:00.305225Z","published_at":"2023-11-03T09:32:49Z","references":["https://osv.dev/vulnerability/GHSA-g8p6-p27c-52fx","https://nvd.nist.gov/vuln/detail/CVE-2023-4043","https://github.com/eclipse-ee4j/parsson/pull/100","https://gitlab.eclipse.org/security/vulnerability-reports/-/issues/13"],"severity":{"label":"medium","score":5.9},"sources":[{"source":"osv","source_id":"GHSA-g8p6-p27c-52fx","url":"https://osv.dev/vulnerability/GHSA-g8p6-p27c-52fx"}],"summary":"Eclipse Parsson Denial of Service vulnerability"}