{"action":"Upgrade com.alipay.sofa:hessian to 3.3.6 (3.x) or 4.0.2 (4.x) or later.","affected":[{"fixed":"4.0.2","introduced":"4.0.0"},{"fixed":"3.3.6","introduced":"0"}],"component":"com.alipay.sofa:hessian","cve_ids":["CVE-2019-9212"],"ecosystem":"Maven","epss":0.02763,"exploited":false,"fixed_versions":["4.0.2","3.3.6"],"ghsa_id":"GHSA-pfwp-8pq4-g7pv","id":"tcs_01M5N97BC7PMY441N4YFXSFAF9","modified_at":"2024-03-21T16:59:13.340238Z","published_at":"2019-03-06T17:36:08Z","references":["https://osv.dev/vulnerability/GHSA-pfwp-8pq4-g7pv","https://nvd.nist.gov/vuln/detail/CVE-2019-9212","https://github.com/alipay/sofa-hessian/issues/34","https://github.com/advisories/GHSA-pfwp-8pq4-g7pv","https://github.com/alipay/sofa-hessian"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-pfwp-8pq4-g7pv","url":"https://osv.dev/vulnerability/GHSA-pfwp-8pq4-g7pv"}],"summary":"Incomplete List of Disallowed Inputs in SOFA-Hessian"}