{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"1.12.0"}],"component":"org.ethereum:ethereumj-core","cve_ids":["CVE-2018-15890"],"ecosystem":"Maven","epss":0.02923,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-hf4p-jm7r-vjjj","id":"tcs_01M5N90DAZ89SW8TXQ9P6YYXKX","modified_at":"2023-11-08T03:59:58.598430Z","published_at":"2019-07-26T16:10:39Z","references":["https://osv.dev/vulnerability/GHSA-hf4p-jm7r-vjjj","https://nvd.nist.gov/vuln/detail/CVE-2018-15890","https://github.com/ethereum/ethereumj/issues/1161","https://github.com/ethereum/ethereumj","https://github.com/frohoff/ysoserial"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-hf4p-jm7r-vjjj","url":"https://osv.dev/vulnerability/GHSA-hf4p-jm7r-vjjj"}],"summary":"Deserialization of Untrusted Data in EthereumJ"}