{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"3.0.4"}],"component":"org.hswebframework.web:hsweb-commons","cve_ids":["CVE-2018-20594"],"ecosystem":"Maven","epss":0.00863,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-qqv6-5w6p-3pgr","id":"tcs_01M5N9A5GN4X08DQPG2GT2Y4SV","modified_at":"2023-11-08T04:00:12.077337Z","published_at":"2019-01-04T17:43:30Z","references":["https://osv.dev/vulnerability/GHSA-qqv6-5w6p-3pgr","https://nvd.nist.gov/vuln/detail/CVE-2018-20594","https://github.com/hs-web/hsweb-framework/issues/107","https://github.com/hs-web/hsweb-framework/commit/b72a2275ed21240296c6539bae1049c56abb542f","https://github.com/advisories/GHSA-qqv6-5w6p-3pgr","https://github.com/hs-web/hsweb-framework"],"severity":{"label":"medium","score":6.1},"sources":[{"source":"osv","source_id":"GHSA-qqv6-5w6p-3pgr","url":"https://osv.dev/vulnerability/GHSA-qqv6-5w6p-3pgr"}],"summary":"Moderate severity vulnerability that affects org.hswebframework.web:hsweb-commons"}