{"action":"Upgrade org.apache.ignite:ignite-core to 2.18.0 or later.","affected":[{"fixed":"2.18.0","introduced":"2.0.0"}],"component":"org.apache.ignite:ignite-core","cve_ids":["CVE-2025-48977"],"ecosystem":"Maven","epss":0.00527,"exploited":false,"fixed_versions":["2.18.0"],"ghsa_id":"GHSA-v45h-mqf4-6939","id":"tcs_01M5N9D5PBNKJQW65YCVHK4PWJ","modified_at":"2026-09-10T03:50:47.650153726Z","published_at":"2026-05-28T12:30:28Z","references":["https://osv.dev/vulnerability/GHSA-v45h-mqf4-6939","https://nvd.nist.gov/vuln/detail/CVE-2025-48977","https://github.com/apache/ignite/commit/5c42c7a303937844179ad470edb35c1ad1cee6ab","https://github.com/apache/ignite","https://lists.apache.org/thread/hgct6918sowd8l58yjohryhpxx81t4n1","http://www.openwall.com/lists/oss-security/2026/05/28/3"],"severity":{"label":"medium","score":6.5},"sources":[{"source":"osv","source_id":"GHSA-v45h-mqf4-6939","url":"https://osv.dev/vulnerability/GHSA-v45h-mqf4-6939"}],"summary":"Apache Ignite REST API Has a Relative Path Traversal Vulnerability"}