{"action":"Upgrade com.jayway.jsonpath:json-path to 2.9.0 or later.","affected":[{"fixed":"2.9.0","introduced":"2.2.0"}],"component":"com.jayway.jsonpath:json-path","cve_ids":["CVE-2023-51074"],"ecosystem":"Maven","epss":0.00676,"exploited":false,"fixed_versions":["2.9.0"],"ghsa_id":"GHSA-pfh2-hfmq-phg5","id":"tcs_01M5N97APFRZVMB2QPZYSJNBFY","modified_at":"2026-09-10T03:49:59.700679265Z","published_at":"2023-12-27T21:31:01Z","references":["https://osv.dev/vulnerability/GHSA-pfh2-hfmq-phg5","https://nvd.nist.gov/vuln/detail/CVE-2023-51074","https://github.com/json-path/JsonPath/issues/973","https://github.com/json-path/JsonPath/commit/71a09c1193726c010917f1157ecbb069ad6c3e3b","https://github.com/json-path/JsonPath","https://github.com/json-path/JsonPath/releases/tag/json-path-2.9.0"],"severity":{"label":"medium","score":5.3},"sources":[{"source":"osv","source_id":"GHSA-pfh2-hfmq-phg5","url":"https://osv.dev/vulnerability/GHSA-pfh2-hfmq-phg5"}],"summary":"json-path Out-of-bounds Write vulnerability"}