{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"1.1.0","last_affected":"1.5.0"}],"component":"org.apache.inlong:inlong","cve_ids":["CVE-2023-24977"],"ecosystem":"Maven","epss":0.0116,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-q9p5-w2v9-6wxf","id":"tcs_01M5N996GH47XN1QC14BVHBXFN","modified_at":"2023-11-08T04:11:49.424210Z","published_at":"2023-02-01T12:32:41Z","references":["https://osv.dev/vulnerability/GHSA-q9p5-w2v9-6wxf","https://nvd.nist.gov/vuln/detail/CVE-2023-24977","https://github.com/apache/inlong/pull/7214","https://github.com/apache/inlong","https://lists.apache.org/thread/ggozxorctn3tdll7bgmpwwcbjnd0s6w7"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-q9p5-w2v9-6wxf","url":"https://osv.dev/vulnerability/GHSA-q9p5-w2v9-6wxf"}],"summary":"Apache InLong contains Out-of-bounds Read vulnerability"}