{"action":"Upgrade io.vertx:vertx-stomp to 3.9.16 (3.x) or 4.4.2 (4.x) or later.","affected":[{"fixed":"3.9.16","introduced":"3.1.0"},{"fixed":"4.4.2","introduced":"4.0.0"}],"component":"io.vertx:vertx-stomp","cve_ids":["CVE-2023-32081"],"ecosystem":"Maven","epss":0.00511,"exploited":false,"fixed_versions":["3.9.16","4.4.2"],"ghsa_id":"GHSA-gvrq-cg5r-7chp","id":"tcs_01M5N8Z1B5E8HJC094WEY3S9X0","modified_at":"2024-02-16T08:13:09.787900Z","published_at":"2023-05-12T20:20:19Z","references":["https://osv.dev/vulnerability/GHSA-gvrq-cg5r-7chp","https://github.com/vert-x3/vertx-stomp/security/advisories/GHSA-gvrq-cg5r-7chp","https://nvd.nist.gov/vuln/detail/CVE-2023-32081","https://github.com/vert-x3/vertx-stomp/commit/0de4bc5a44ddb57e74d92c445f16456fa03f265b","https://github.com/vert-x3/vertx-stomp"],"severity":{"label":"medium","score":6.5},"sources":[{"source":"osv","source_id":"GHSA-gvrq-cg5r-7chp","url":"https://osv.dev/vulnerability/GHSA-gvrq-cg5r-7chp"}],"summary":"Vert.x STOMP server process client frames that would not send initially a connect frame"}