{"action":"Upgrade com.github.briandilley.jsonrpc4j:jsonrpc4j to 1.7.0 or later.","affected":[{"fixed":"1.7.0","introduced":"0"}],"component":"com.github.briandilley.jsonrpc4j:jsonrpc4j","cve_ids":["CVE-2026-24802"],"ecosystem":"Maven","epss":0.00426,"exploited":false,"fixed_versions":["1.7.0"],"ghsa_id":"GHSA-hcx3-3q5c-r5v6","id":"tcs_01M5N90BR6BRFDS50K6BZDCE11","modified_at":"2026-02-03T03:07:17.525286Z","published_at":"2026-01-27T09:30:30Z","references":["https://osv.dev/vulnerability/GHSA-hcx3-3q5c-r5v6","https://nvd.nist.gov/vuln/detail/CVE-2026-24802","https://github.com/briandilley/jsonrpc4j/pull/333","https://github.com/briandilley/jsonrpc4j/commit/087f5268eaf901f90d1e84062def77faa52ad8b2","https://github.com/briandilley/jsonrpc4j"],"severity":{"label":"medium","score":5.3},"sources":[{"source":"osv","source_id":"GHSA-hcx3-3q5c-r5v6","url":"https://osv.dev/vulnerability/GHSA-hcx3-3q5c-r5v6"},{"source":"nvd","source_id":"CVE-2026-24802","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-24802"}],"summary":"jsonrpc4j has Infinite Loop in RPC Stream Writer"}