{"action":"Upgrade org.springframework.ldap:spring-ldap-core to 2.4.4 (2.x) or 3.2.8 (3.x) or later.","affected":[{"fixed":"3.2.8","introduced":"3.0.0"},{"fixed":"2.4.4","introduced":"0"}],"component":"org.springframework.ldap:spring-ldap-core","cve_ids":["CVE-2024-38829"],"ecosystem":"Maven","exploited":false,"fixed_versions":["3.2.8","2.4.4"],"ghsa_id":"GHSA-mqvr-2rp8-j7h4","id":"tcs_01M5N95KRG8PZ951984H8MG0QC","modified_at":"2026-09-10T03:50:21.742406520Z","published_at":"2024-12-04T21:30:52Z","references":["https://osv.dev/vulnerability/GHSA-mqvr-2rp8-j7h4","https://nvd.nist.gov/vuln/detail/CVE-2024-38829","https://github.com/spring-projects/spring-ldap","https://spring.io/security/cve-2024-38829"],"severity":{"label":"low","score":3.7},"sources":[{"source":"osv","source_id":"GHSA-mqvr-2rp8-j7h4","url":"https://osv.dev/vulnerability/GHSA-mqvr-2rp8-j7h4"}],"summary":"Spring LDAP data exposure vulnerability"}