{"action":"Upgrade org.elasticsearch:elasticsearch-hadoop to 7.17.11 (7.x) or 8.9.0 (8.x) or later.","affected":[{"fixed":"7.17.11","introduced":"0"},{"fixed":"8.9.0","introduced":"8.0.0"}],"component":"org.elasticsearch:elasticsearch-hadoop","cve_ids":["CVE-2023-46674"],"ecosystem":"Maven","epss":0.00243,"exploited":false,"fixed_versions":["7.17.11","8.9.0"],"ghsa_id":"GHSA-rv74-m283-5j95","id":"tcs_01M5N9CJYRAX0CWKW2DY5S0JX7","modified_at":"2024-02-16T08:09:54.115241Z","published_at":"2023-12-05T18:30:23Z","references":["https://osv.dev/vulnerability/GHSA-rv74-m283-5j95","https://nvd.nist.gov/vuln/detail/CVE-2023-46674","https://discuss.elastic.co/t/elasticsearch-hadoop-7-17-11-8-9-0-security-update-esa-2023-28/348663","https://github.com/elastic/elasticsearch-hadoop"],"severity":{"label":"medium","score":6},"sources":[{"source":"osv","source_id":"GHSA-rv74-m283-5j95","url":"https://osv.dev/vulnerability/GHSA-rv74-m283-5j95"}],"summary":"Elasticsearch-hadoop Unsafe Deserialization"}