{"action":"Upgrade ai.djl:api to 0.31.1 or later.","affected":[{"fixed":"0.31.1","introduced":"0"}],"component":"ai.djl:api","cve_ids":["CVE-2025-0851"],"ecosystem":"Maven","epss":0.23267,"exploited":false,"fixed_versions":["0.31.1"],"ghsa_id":"GHSA-jcrp-x7w3-ffmg","id":"tcs_01M5N92M0NF4B5J0Y727WKJVF3","modified_at":"2026-09-10T03:50:22.002922397Z","published_at":"2025-01-29T22:21:33Z","references":["https://osv.dev/vulnerability/GHSA-jcrp-x7w3-ffmg","https://github.com/deepjavalibrary/djl/security/advisories/GHSA-jcrp-x7w3-ffmg","https://nvd.nist.gov/vuln/detail/CVE-2025-0851","https://github.com/deepjavalibrary/djl/commit/7415cc5f72aae69ea9716a5e4f709af03a77a619","https://aws.amazon.com/security/security-bulletins/AWS-2025-003","https://github.com/deepjavalibrary/djl","https://github.com/deepjavalibrary/djl/releases/tag/v0.31.1"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-jcrp-x7w3-ffmg","url":"https://osv.dev/vulnerability/GHSA-jcrp-x7w3-ffmg"}],"summary":"Deep Java Library path traversal issue"}