{"action":"Upgrade org.apache.karaf.decanter.collector:org.apache.karaf.decanter.collector.log.socket to 2.12.0 or later.","affected":[{"fixed":"2.12.0","introduced":"0"}],"component":"org.apache.karaf.decanter.collector:org.apache.karaf.decanter.collector.log.socket","cve_ids":["CVE-2026-24656"],"ecosystem":"Maven","epss":0.00681,"exploited":false,"fixed_versions":["2.12.0"],"ghsa_id":"GHSA-jmw5-58c7-587h","id":"tcs_01M5N93958H4TD05W63X4G96G6","modified_at":"2026-02-03T03:07:29.196463Z","published_at":"2026-01-26T12:30:29Z","references":["https://osv.dev/vulnerability/GHSA-jmw5-58c7-587h","https://nvd.nist.gov/vuln/detail/CVE-2026-24656","https://github.com/apache/karaf-decanter/issues/555","https://github.com/apache/karaf-decanter/commit/9d7058d37160a16aaad34b488170adf277351e8b","https://github.com/apache/karaf-decanter","https://lists.apache.org/thread/dc5wmdn6hyc992olntkl75kk04ndzx34","http://www.openwall.com/lists/oss-security/2026/01/24/1"],"severity":{"label":"low","score":3.7},"sources":[{"source":"osv","source_id":"GHSA-jmw5-58c7-587h","url":"https://osv.dev/vulnerability/GHSA-jmw5-58c7-587h"}],"summary":"Apache Karaf Decanter has Deserialization of Untrusted Data in its Log Socket Collector"}