{"action":"Upgrade io.ratpack:ratpack-core to 1.7.5 or later.","affected":[{"fixed":"1.7.5","introduced":"0"}],"component":"io.ratpack:ratpack-core","cve_ids":["CVE-2019-17513"],"ecosystem":"Maven","epss":0.02153,"exploited":false,"fixed_versions":["1.7.5"],"ghsa_id":"GHSA-mvqp-q37c-wf9j","id":"tcs_01M5N95V1JY8ZK1HBWK9CARKAC","modified_at":"2026-07-08T05:59:42.800257155Z","published_at":"2019-10-21T16:08:43Z","references":["https://osv.dev/vulnerability/GHSA-mvqp-q37c-wf9j","https://github.com/ratpack/ratpack/security/advisories/GHSA-mvqp-q37c-wf9j","https://nvd.nist.gov/vuln/detail/CVE-2019-17513","https://github.com/ratpack/ratpack/commit/c560a8d10cb8bdd7a526c1ca2e67c8f224ca23ae","https://github.com/ratpack/ratpack/commit/efb910d38a96494256f36675ef0e5061097dd77d","https://github.com/advisories/GHSA-mvqp-q37c-wf9j","https://github.com/ratpack/ratpack","https://github.com/ratpack/ratpack/releases/tag/v1.7.5","https://ratpack.io/versions/1.7.5"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-mvqp-q37c-wf9j","url":"https://osv.dev/vulnerability/GHSA-mvqp-q37c-wf9j"}],"summary":"io.ratpack:ratpack-core vulnerable to Improper Neutralization of Special Elements in Output ('Injection')"}