{"action":"Upgrade org.apache.pdfbox:pdfbox to 1.8.16 (1.x) or 2.0.12 (2.x) or later.","affected":[{"fixed":"1.8.16","introduced":"1.8.0"},{"fixed":"2.0.12","introduced":"2.0.0"}],"component":"org.apache.pdfbox:pdfbox","cve_ids":["CVE-2018-11797"],"ecosystem":"Maven","epss":0.03505,"exploited":false,"fixed_versions":["1.8.16","2.0.12"],"ghsa_id":"GHSA-gx96-vgf7-hwfg","id":"tcs_01M5N8Z8XBKM6XP57GPWCQS0JJ","modified_at":"2024-02-16T08:14:19.885368Z","published_at":"2018-10-17T18:22:29Z","references":["https://osv.dev/vulnerability/GHSA-gx96-vgf7-hwfg","https://nvd.nist.gov/vuln/detail/CVE-2018-11797","https://github.com/advisories/GHSA-gx96-vgf7-hwfg","https://lists.apache.org/thread.html/645574bc50b886d39c20b4065d51ccb1cd5d3a6b4750a22edbb565eb@%3Cannounce.apache.org%3E","https://lists.apache.org/thread.html/a9760973a873522f4d4c0a99916ceb74f361d91006b663a0a418d34a@%3Cannounce.apache.org%3E","https://lists.apache.org/thread.html/r54594251369e14c185da9662a5340a52afbbdf75d61c9c3a69c8f2e8@%3Cdev.pdfbox.apache.org%3E","https://lists.debian.org/debian-lts-announce/2018/10/msg00008.html","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6HKVPTJWZGUB4MH4AAOWMRJHRDBYFHGJ","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/POPOGHJ5CVMUVCRQU7APBAN5IVZGZFDX","https://www.oracle.com/security-alerts/cpuapr2020.html"],"severity":{"label":"medium","score":5.5},"sources":[{"source":"osv","source_id":"GHSA-gx96-vgf7-hwfg","url":"https://osv.dev/vulnerability/GHSA-gx96-vgf7-hwfg"}],"summary":"In Apache PDFBox a carefully crafted PDF file can trigger an extremely long running computation"}