{"action":"Upgrade com.mchange:mchange-commons-java to 0.4.0 or later.","affected":[{"fixed":"0.4.0","introduced":"0"}],"component":"com.mchange:mchange-commons-java","cve_ids":["CVE-2026-27727"],"ecosystem":"Maven","epss":0.00977,"exploited":false,"fixed_versions":["0.4.0"],"ghsa_id":"GHSA-m2cm-222f-qw44","id":"tcs_01M5N942HPFXHPTGPB3W9YMNH5","modified_at":"2026-09-10T03:50:35.310683664Z","published_at":"2026-02-25T18:20:05Z","references":["https://osv.dev/vulnerability/GHSA-m2cm-222f-qw44","https://github.com/swaldman/mchange-commons-java/security/advisories/GHSA-m2cm-222f-qw44","https://nvd.nist.gov/vuln/detail/CVE-2026-27727","https://github.com/swaldman/mchange-commons-java","https://mogwailabs.de/en/blog/2025/02/c3p0-you-little-rascal","https://www.mchange.com/projects/c3p0/#configuring_security","https://www.mchange.com/projects/c3p0/#security-note"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-m2cm-222f-qw44","url":"https://osv.dev/vulnerability/GHSA-m2cm-222f-qw44"},{"source":"nvd","source_id":"CVE-2026-27727","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-27727"}],"summary":"mchange-commons-java: Remote Code Execution via JNDI Reference Resolution"}