{"action":"Upgrade io.ratpack:ratpack-core to 1.9.0 or later.","affected":[{"fixed":"1.9.0","introduced":"0"}],"component":"io.ratpack:ratpack-core","cve_ids":["CVE-2021-29485"],"ecosystem":"Maven","epss":0.01989,"exploited":false,"fixed_versions":["1.9.0"],"ghsa_id":"GHSA-hc33-32vw-rpp9","id":"tcs_01M5N908QSGKV9HM2XQYZ8ABPH","modified_at":"2026-07-08T06:27:52.648703965Z","published_at":"2021-07-01T17:01:16Z","references":["https://osv.dev/vulnerability/GHSA-hc33-32vw-rpp9","https://github.com/ratpack/ratpack/security/advisories/GHSA-hc33-32vw-rpp9","https://nvd.nist.gov/vuln/detail/CVE-2021-29485","https://github.com/ratpack/ratpack","https://mvnrepository.com/artifact/io.ratpack/ratpack-core"],"severity":{"label":"critical","score":9.9},"sources":[{"source":"osv","source_id":"GHSA-hc33-32vw-rpp9","url":"https://osv.dev/vulnerability/GHSA-hc33-32vw-rpp9"}],"summary":"Remote Code Execution Vulnerability in Session Storage"}