{"action":"Upgrade com.taoensso:nippy to 2.14.2 or later.","affected":[{"fixed":"2.14.2","introduced":"0"}],"component":"com.taoensso:nippy","cve_ids":["CVE-2020-24164"],"ecosystem":"Maven","epss":0.01114,"exploited":false,"fixed_versions":["2.14.2"],"ghsa_id":"GHSA-p5gm-fgfx-hr7h","id":"tcs_01M5N96H7X0HY1BKZ5VWYEPDAN","modified_at":"2023-11-08T04:03:06.527087Z","published_at":"2022-02-10T20:55:10Z","references":["https://osv.dev/vulnerability/GHSA-p5gm-fgfx-hr7h","https://nvd.nist.gov/vuln/detail/CVE-2020-24164","https://github.com/ptaoussanis/nippy/issues/130","https://github.com/ptaoussanis/nippy/commit/61fb009fdde2994140f2da2e495ba8af3a873eb2"],"severity":{"label":"high","score":7.8},"sources":[{"source":"osv","source_id":"GHSA-p5gm-fgfx-hr7h","url":"https://osv.dev/vulnerability/GHSA-p5gm-fgfx-hr7h"}],"summary":"Gadget chain attack in Nippy"}