{"action":"Upgrade io.projectreactor.netty:reactor-netty-core to 1.0.39 (1.0.x) or 1.1.13 (1.1.x) or later.","affected":[{"fixed":"1.1.13","introduced":"1.1.0"},{"fixed":"1.0.39","introduced":"1.0.0"}],"component":"io.projectreactor.netty:reactor-netty-core","cve_ids":["CVE-2023-34054"],"ecosystem":"Maven","epss":0.00914,"exploited":false,"fixed_versions":["1.1.13","1.0.39"],"ghsa_id":"GHSA-q24v-hpg3-v3jp","id":"tcs_01M5N98BE26NAW9TB4YJSTJ77G","modified_at":"2026-08-07T08:12:11.279858013Z","published_at":"2023-11-28T09:30:27Z","references":["https://osv.dev/vulnerability/GHSA-q24v-hpg3-v3jp","https://nvd.nist.gov/vuln/detail/CVE-2023-34054","https://github.com/reactor/reactor-netty/commit/37dc8a2ef6514cd7834e75e7f3faf0b9ea044c88","https://github.com/reactor/reactor-netty/commit/4ddbb1b9b985bb72290110ebae468a54e7f19420","https://github.com/reactor/reactor-netty/commit/ae82154e99e6f51f4816effd135f0c3a966d6ea3","https://github.com/reactor/reactor-netty","https://github.com/reactor/reactor-netty/releases/tag/v1.0.39","https://github.com/reactor/reactor-netty/releases/tag/v1.1.13","https://spring.io/security/cve-2023-34054"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-q24v-hpg3-v3jp","url":"https://osv.dev/vulnerability/GHSA-q24v-hpg3-v3jp"}],"summary":"Reactor Netty HTTP Server denial of service vulnerability"}