{"action":"Upgrade com.nablarch.framework:nablarch-fw-web to 1.5.1 or later.","affected":[{"fixed":"1.5.1","introduced":"0"}],"component":"com.nablarch.framework:nablarch-fw-web","cve_ids":["CVE-2019-5919"],"ecosystem":"Maven","epss":0.00953,"exploited":false,"fixed_versions":["1.5.1"],"ghsa_id":"GHSA-hmx6-gc2p-5p82","id":"tcs_01M5N9104SH57HZMHWP306XDFC","modified_at":"2024-02-16T08:16:08.742609Z","published_at":"2022-05-13T01:08:15Z","references":["https://osv.dev/vulnerability/GHSA-hmx6-gc2p-5p82","https://nvd.nist.gov/vuln/detail/CVE-2019-5919","https://github.com/nablarch/nablarch-fw-web/pull/53","https://github.com/nablarch/nablarch-fw-web/pull/54","https://nablarch.atlassian.net/browse/NAB-313","http://jvn.jp/en/jp/JVN56542712/index.html"],"severity":{"label":"critical","score":9.1},"sources":[{"source":"osv","source_id":"GHSA-hmx6-gc2p-5p82","url":"https://osv.dev/vulnerability/GHSA-hmx6-gc2p-5p82"}],"summary":"Nablarch Incomplete Cryptography"}