{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"5.8.21"}],"component":"cn.hutool:hutool-json","cve_ids":["CVE-2023-42276"],"ecosystem":"Maven","epss":0.00911,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-rxgf-r843-g53h","id":"tcs_01M5N9CV5FCV55YW22EFE6AX53","modified_at":"2024-02-16T08:17:55.609430Z","published_at":"2023-09-09T00:30:48Z","references":["https://osv.dev/vulnerability/GHSA-rxgf-r843-g53h","https://nvd.nist.gov/vuln/detail/CVE-2023-42276","https://github.com/dromara/hutool/issues/3286","https://github.com/dromara/hutool/commit/9ba8f9ca5dd32441f2e0f150cb22fa178bb771d3","https://github.com/dromara/hutool"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-rxgf-r843-g53h#Maven/cn.hutool:hutool-json","url":"https://osv.dev/vulnerability/GHSA-rxgf-r843-g53h"}],"summary":"hutool Buffer Overflow vulnerability"}