{"action":"Upgrade com.typesafe.akka:akka-http-core_2.12 to 10.0.6 or later.","affected":[{"fixed":"10.0.6","introduced":"0"}],"component":"com.typesafe.akka:akka-http-core_2.12","cve_ids":["CVE-2017-1000118"],"ecosystem":"Maven","epss":0.01103,"exploited":false,"fixed_versions":["10.0.6"],"ghsa_id":"GHSA-gfx6-ph4q-q54q","id":"tcs_01M5N8Y5DBB7QWZED06VQHV48G","modified_at":"2023-11-08T03:58:43.434952Z","published_at":"2018-10-22T20:53:02Z","references":["https://osv.dev/vulnerability/GHSA-gfx6-ph4q-q54q","https://nvd.nist.gov/vuln/detail/CVE-2017-1000118","https://doc.akka.io/docs/akka-http/10.0.6/security/2017-05-03-illegal-media-range-in-accept-header-causes-stackoverflowerror.html","https://github.com/advisories/GHSA-gfx6-ph4q-q54q"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-gfx6-ph4q-q54q","url":"https://osv.dev/vulnerability/GHSA-gfx6-ph4q-q54q"}],"summary":"Improper Restriction of Operations within the Bounds of a Memory Buffer in akka-http-core"}