{"action":"Upgrade cn.hutool:hutool-core to 5.8.22 or later.","affected":[{"fixed":"5.8.22","introduced":"0"}],"component":"cn.hutool:hutool-core","cve_ids":["CVE-2023-42278"],"ecosystem":"Maven","epss":0.00837,"exploited":false,"fixed_versions":["5.8.22"],"ghsa_id":"GHSA-rr66-qh5m-w6mx","id":"tcs_01M5N9CCP608A7N952QFDT18CZ","modified_at":"2025-01-03T19:29:55.739473Z","published_at":"2023-09-09T00:30:48Z","references":["https://osv.dev/vulnerability/GHSA-rr66-qh5m-w6mx","https://nvd.nist.gov/vuln/detail/CVE-2023-42278","https://github.com/dromara/hutool/issues/3289","https://github.com/dromara/hutool/commit/5c4486b9f58a83f283868135138f6ff3741b8c12","https://github.com/dromara/hutool"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-rr66-qh5m-w6mx","url":"https://osv.dev/vulnerability/GHSA-rr66-qh5m-w6mx"}],"summary":"hutool Buffer Overflow vulnerability"}