{"action":"Upgrade org.springframework.security:spring-security-core to 4.2.12 (4.2.x), 5.0.12 (5.0.x) or 5.1.5 (5.1.x) or later.","affected":[{"fixed":"4.2.12","introduced":"4.2.0"},{"fixed":"5.0.12","introduced":"5.0.0"},{"fixed":"5.1.5","introduced":"5.1.0"}],"component":"org.springframework.security:spring-security-core","cve_ids":["CVE-2019-3795"],"ecosystem":"Maven","epss":0.01921,"exploited":false,"fixed_versions":["4.2.12","5.0.12","5.1.5"],"ghsa_id":"GHSA-v2r2-7qm7-jj6v","id":"tcs_01M5N9CYS0YXXQQF4WWQWKDGAB","modified_at":"2023-11-08T04:01:34.281605Z","published_at":"2019-04-16T15:10:59Z","references":["https://osv.dev/vulnerability/GHSA-v2r2-7qm7-jj6v","https://nvd.nist.gov/vuln/detail/CVE-2019-3795","https://github.com/advisories/GHSA-v2r2-7qm7-jj6v","https://lists.debian.org/debian-lts-announce/2019/05/msg00026.html","https://pivotal.io/security/cve-2019-3795","http://www.securityfocus.com/bid/107802"],"severity":{"label":"medium","score":5.3},"sources":[{"source":"osv","source_id":"GHSA-v2r2-7qm7-jj6v","url":"https://osv.dev/vulnerability/GHSA-v2r2-7qm7-jj6v"}],"summary":"Spring Security uses insufficiently random values"}