{"action":"Upgrade org.springframework.cloud:spring-cloud-function-context to 4.0.8 (4.0.x) or 4.1.2 (4.1.x) or later.","affected":[{"fixed":"4.0.8","introduced":"4.0.0"},{"fixed":"4.1.2","introduced":"4.1.0"}],"component":"org.springframework.cloud:spring-cloud-function-context","cve_ids":["CVE-2024-22271"],"ecosystem":"Maven","epss":0.00364,"exploited":false,"fixed_versions":["4.0.8","4.1.2"],"ghsa_id":"GHSA-j4r7-p9fp-w3f3","id":"tcs_01M5N91Z7PPVNGKY3Q0A0TSJVE","modified_at":"2024-07-09T21:42:44.433619Z","published_at":"2024-07-09T15:30:53Z","references":["https://osv.dev/vulnerability/GHSA-j4r7-p9fp-w3f3","https://nvd.nist.gov/vuln/detail/CVE-2024-22271","https://github.com/spring-cloud/spring-cloud-function/issues/1139","https://github.com/spring-cloud/spring-cloud-function/commit/59fe298b67fcb9249db727a7b3a33612fc7a9f75","https://github.com/spring-cloud/spring-cloud-function","https://github.com/spring-cloud/spring-cloud-function/releases/tag/v4.1.2","https://spring.io/security/cve-2024-22271"],"severity":{"label":"high","score":8.2},"sources":[{"source":"osv","source_id":"GHSA-j4r7-p9fp-w3f3","url":"https://osv.dev/vulnerability/GHSA-j4r7-p9fp-w3f3"}],"summary":"Spring Cloud Function Framework vulnerable to Denial of Service"}