{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"3.1.5"}],"component":"io.atomix:atomix","cve_ids":["CVE-2020-35210"],"ecosystem":"Maven","epss":0.0091,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-mf27-wg66-m8f5","id":"tcs_01M5N94YFRAFM4PVG57DMANSJF","modified_at":"2023-11-08T04:03:32.770438Z","published_at":"2021-12-17T20:41:09Z","references":["https://osv.dev/vulnerability/GHSA-mf27-wg66-m8f5","https://nvd.nist.gov/vuln/detail/CVE-2020-35210","https://docs.google.com/presentation/d/1eZznIciFI06_5UJrXvlLugH2-nmjfYpQO5NyNMc9RxU/edit?usp=sharing","https://github.com/atomix/atomix"],"severity":{"label":"medium","score":6.5},"sources":[{"source":"osv","source_id":"GHSA-mf27-wg66-m8f5","url":"https://osv.dev/vulnerability/GHSA-mf27-wg66-m8f5"}],"summary":"A vulnerability in Atomix v3.1.5 allows attackers to cause a denial of service (DoS) via a Raft session flooding attack using Raft OpenSessionRequest messages."}