{"action":"Upgrade org.jboss.narayana.rts:lra-coordinator-jar to 7.1.0.Final or later.","affected":[{"fixed":"7.1.0.Final","introduced":"0"}],"component":"org.jboss.narayana.rts:lra-coordinator-jar","cve_ids":["CVE-2024-8447"],"ecosystem":"Maven","epss":0.00681,"exploited":false,"fixed_versions":["7.1.0.Final"],"ghsa_id":"GHSA-qq9f-q439-2574","id":"tcs_01M5N9A2P1PN9Y8X2RKK5ZMZWP","modified_at":"2025-05-15T01:25:51.843294Z","published_at":"2025-01-02T21:31:42Z","references":["https://osv.dev/vulnerability/GHSA-qq9f-q439-2574","https://nvd.nist.gov/vuln/detail/CVE-2024-8447","https://github.com/jbosstm/narayana/pull/2293","https://github.com/jbosstm/narayana/commit/eb778412de230afc4687a2df43641280494156c5","https://access.redhat.com/errata/RHSA-2025:3357","https://access.redhat.com/errata/RHSA-2025:3358","https://access.redhat.com/errata/RHSA-2025:7620","https://access.redhat.com/security/cve/CVE-2024-8447","https://bugzilla.redhat.com/show_bug.cgi?id=2335206","https://github.com/jbosstm/narayana"],"severity":{"label":"medium","score":5.9},"sources":[{"source":"osv","source_id":"GHSA-qq9f-q439-2574","url":"https://osv.dev/vulnerability/GHSA-qq9f-q439-2574"}],"summary":"Narayana deadlock via multiple join requests sent to LRA Coordinator"}