{"action":"Upgrade org.apache.openjpa:openjpa to 1.2.3 (1.x) or 2.2.2 (2.x) or later.","affected":[{"fixed":"1.2.3","introduced":"1.0.0"},{"fixed":"2.2.2","introduced":"2.0.0"}],"component":"org.apache.openjpa:openjpa","cve_ids":["CVE-2013-1768"],"ecosystem":"Maven","epss":0.09511,"exploited":false,"fixed_versions":["1.2.3","2.2.2"],"ghsa_id":"GHSA-j65f-mvgw-prp2","id":"tcs_01M5N923SCKE5GJB0QNZ0QQD0G","modified_at":"2024-12-04T05:41:29.524485Z","published_at":"2022-05-14T03:30:19Z","references":["https://osv.dev/vulnerability/GHSA-j65f-mvgw-prp2","https://nvd.nist.gov/vuln/detail/CVE-2013-1768","https://github.com/apache/openjpa/commit/7f14c7df6b7c7ef42f0671138b9b5dd062fe99aa","https://github.com/apache/openjpa/commit/87a4452be08b4f97274d0ccfac585ae85841e470","https://github.com/apache/openjpa/commit/b8933dc24b84e7e7430ece56bd645d425dd89f24","https://exchange.xforce.ibmcloud.com/vulnerabilities/82268","https://github.com/apache/openjpa","https://seclists.org/fulldisclosure/2013/Jun/98","http://rhn.redhat.com/errata/RHSA-2013-1862.html","http://svn.apache.org/viewvc?view=revision&revision=1462076","http://svn.apache.org/viewvc?view=revision&revision=1462225","http://svn.apache.org/viewvc?view=revision&revision=1462268","http://svn.apache.org/viewvc?view=revision&revision=1462318","http://svn.apache.org/viewvc?view=revision&revision=1462328","http://svn.apache.org/viewvc?view=revision&revision=1462488","http://svn.apache.org/viewvc?view=revision&revision=1462512","http://svn.apache.org/viewvc?view=revision&revision=1462558","http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html"],"severity":{"label":"high"},"sources":[{"source":"osv","source_id":"GHSA-j65f-mvgw-prp2","url":"https://osv.dev/vulnerability/GHSA-j65f-mvgw-prp2"}],"summary":"Deserialization of Untrusted Data in Apache OpenJPA"}