{"action":"Upgrade com.rabbitmq.jms:rabbitmq-jms to 1.15.2 (1.x) or 2.2.0 (2.x) or later.","affected":[{"fixed":"2.2.0","introduced":"2.0"},{"fixed":"1.15.2","introduced":"1.0"}],"component":"com.rabbitmq.jms:rabbitmq-jms","cve_ids":["CVE-2020-36282"],"ecosystem":"Maven","epss":0.02844,"exploited":false,"fixed_versions":["2.2.0","1.15.2"],"ghsa_id":"GHSA-v525-c3g5-cg9p","id":"tcs_01M5N9D7ECSX0TR4TG6KX7EN9K","modified_at":"2024-12-02T05:35:24.873014Z","published_at":"2021-12-10T17:15:49Z","references":["https://osv.dev/vulnerability/GHSA-v525-c3g5-cg9p","https://nvd.nist.gov/vuln/detail/CVE-2020-36282","https://github.com/rabbitmq/rabbitmq-jms-client/issues/135","https://github.com/rabbitmq/rabbitmq-jms-client/pull/136/commits/f647e5dbfe055a2ca8cbb16dd70f9d50d888b638","https://github.com/rabbitmq/rabbitmq-jms-client/releases/tag/v1.15.2","https://github.com/rabbitmq/rabbitmq-jms-client/releases/tag/v2.2.0","https://medium.com/@ramon93i7/a99645d0448b"],"severity":{"label":"high"},"sources":[{"source":"osv","source_id":"GHSA-v525-c3g5-cg9p","url":"https://osv.dev/vulnerability/GHSA-v525-c3g5-cg9p"}],"summary":"Unsafe Deserialization that can Result in Code Execution"}