{"action":"Upgrade org.openidentityplatform.openam:openam-push-notification to 16.1.1 or later.","affected":[{"fixed":"16.1.1","introduced":"0"}],"component":"org.openidentityplatform.openam:openam-push-notification","cve_ids":["CVE-2026-45794"],"ecosystem":"Maven","epss":0.00627,"exploited":false,"fixed_versions":["16.1.1"],"ghsa_id":"GHSA-pp89-732f-3g8q","id":"tcs_01M5N97SD10YKFH02R175NJYZ4","modified_at":"2026-06-25T16:56:28.334611Z","published_at":"2026-06-25T16:30:03Z","references":["https://osv.dev/vulnerability/GHSA-pp89-732f-3g8q","https://github.com/OpenIdentityPlatform/OpenAM/security/advisories/GHSA-pp89-732f-3g8q","https://github.com/OpenIdentityPlatform/OpenAM"],"severity":{"label":"high","score":7.7},"sources":[{"source":"osv","source_id":"GHSA-pp89-732f-3g8q","url":"https://osv.dev/vulnerability/GHSA-pp89-732f-3g8q"},{"source":"nvd","source_id":"CVE-2026-45794","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-45794"}],"summary":"OpenAM has Unsafe Java Deserialization via SNS"}