{"action":"No fix published. Pin and monitor.","affected":[],"component":"org.mvel:mvel2","cve_ids":["CVE-2023-51079"],"ecosystem":"Maven","epss":0.00737,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-h63j-xqx6-w58r","id":"tcs_01M5N8ZSMQJHHSJHQ7B9FPD5SF","modified_at":"2024-01-08T15:54:10Z","published_at":"2023-12-27T21:31:01Z","references":["https://osv.dev/vulnerability/GHSA-h63j-xqx6-w58r","https://nvd.nist.gov/vuln/detail/CVE-2023-51079","https://github.com/mvel/mvel/issues/348","https://github.com/mvel/mvel/issues/348#issuecomment-1874047271","https://github.com/mvel/mvel"],"severity":{"label":"medium","score":5.3},"sources":[{"source":"osv","source_id":"GHSA-h63j-xqx6-w58r","url":"https://osv.dev/vulnerability/GHSA-h63j-xqx6-w58r"}],"summary":"mvel2 TimeOut error exists in the ParseTools.subCompileExpression method"}