{"action":"Upgrade com.mchange:c3p0 to 0.9.5.3 or later.","affected":[{"fixed":"0.9.5.3","introduced":"0"}],"component":"com.mchange:c3p0","cve_ids":["CVE-2018-20433"],"ecosystem":"Maven","epss":0.04589,"exploited":false,"fixed_versions":["0.9.5.3"],"ghsa_id":"GHSA-q485-j897-qc27","id":"tcs_01M5N98KCCMENTPPVPAHQR67BQ","modified_at":"2024-02-17T05:36:17.856971Z","published_at":"2019-01-07T19:14:34Z","references":["https://osv.dev/vulnerability/GHSA-q485-j897-qc27","https://nvd.nist.gov/vuln/detail/CVE-2018-20433","https://github.com/zhutougg/c3p0/commit/2eb0ea97f745740b18dd45e4a909112d4685f87b","https://github.com/advisories/GHSA-q485-j897-qc27","https://github.com/zhutougg/c3p0","https://lists.debian.org/debian-lts-announce/2018/12/msg00021.html","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/BFIVX6HOVNLAM7W3SUAMHYRNLCVQSAWR","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MQ47OFV57Y2DAHMGA5H3JOL4WHRWRFN4"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-q485-j897-qc27","url":"https://osv.dev/vulnerability/GHSA-q485-j897-qc27"}],"summary":"XML External Entity Reference in mchange:c3p0"}