{"action":"Upgrade org.codehaus.jettison:jettison to 1.5.4 or later.","affected":[{"fixed":"1.5.4","introduced":"0"}],"component":"org.codehaus.jettison:jettison","cve_ids":["CVE-2023-1436"],"ecosystem":"Maven","epss":0.01009,"exploited":false,"fixed_versions":["1.5.4"],"ghsa_id":"GHSA-q6g2-g7f3-rr83","id":"tcs_01M5N98VNDX8YEN9ECM17WNT8J","modified_at":"2026-09-10T03:49:53.094135022Z","published_at":"2023-03-22T06:30:21Z","references":["https://osv.dev/vulnerability/GHSA-q6g2-g7f3-rr83","https://nvd.nist.gov/vuln/detail/CVE-2023-1436","https://github.com/jettison-json/jettison/issues/60","https://github.com/jettison-json/jettison/pull/62","https://github.com/jettison-json/jettison","https://github.com/jettison-json/jettison/releases/tag/jettison-1.5.4","https://research.jfrog.com/vulnerabilities/jettison-json-array-dos-xray-427911"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-q6g2-g7f3-rr83","url":"https://osv.dev/vulnerability/GHSA-q6g2-g7f3-rr83"}],"summary":"Jettison vulnerable to infinite recursion"}