{"action":"Upgrade org.opensearch.plugin:opensearch-security to 1.3.10.0 (1.x) or 2.7.0.0 (2.x) or later.","affected":[{"fixed":"1.3.10.0","introduced":"1.0.0"},{"fixed":"2.7.0.0","introduced":"2.0.0"}],"component":"org.opensearch.plugin:opensearch-security","cve_ids":["CVE-2023-31141"],"ecosystem":"Maven","epss":0.0046,"exploited":false,"fixed_versions":["1.3.10.0","2.7.0.0"],"ghsa_id":"GHSA-g8xc-6mf7-h28h","id":"tcs_01M5N8XVC1WPGR3R47YYSQR95M","modified_at":"2024-02-16T08:11:19.036510Z","published_at":"2023-05-09T21:25:06Z","references":["https://osv.dev/vulnerability/GHSA-g8xc-6mf7-h28h","https://github.com/opensearch-project/security/security/advisories/GHSA-g8xc-6mf7-h28h","https://nvd.nist.gov/vuln/detail/CVE-2023-31141","https://github.com/opensearch-project/security"],"severity":{"label":"medium","score":4.8},"sources":[{"source":"osv","source_id":"GHSA-g8xc-6mf7-h28h","url":"https://osv.dev/vulnerability/GHSA-g8xc-6mf7-h28h"}],"summary":"OpenSearch issue with fine-grained access control during extremely rare race conditions"}