{"action":"Upgrade org.springframework.amqp:spring-amqp to 1.5.7 (1.5.x), 1.6.11 (1.6.x) or 1.7.4 (1.7.x) or later.","affected":[{"fixed":"1.5.7","introduced":"0"},{"fixed":"1.6.11","introduced":"1.6.0"},{"fixed":"1.7.4","introduced":"1.7.0"}],"component":"org.springframework.amqp:spring-amqp","cve_ids":["CVE-2017-8045"],"ecosystem":"Maven","epss":0.03554,"exploited":false,"fixed_versions":["1.5.7","1.6.11","1.7.4"],"ghsa_id":"GHSA-vqqg-xgv7-cf68","id":"tcs_01M5N9ENQ8D5M2JEPP6GQJZ444","modified_at":"2023-11-08T03:59:27.500194Z","published_at":"2022-05-17T00:16:13Z","references":["https://osv.dev/vulnerability/GHSA-vqqg-xgv7-cf68","https://nvd.nist.gov/vuln/detail/CVE-2017-8045","https://pivotal.io/security/cve-2017-8045","http://www.securityfocus.com/bid/100936"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-vqqg-xgv7-cf68","url":"https://osv.dev/vulnerability/GHSA-vqqg-xgv7-cf68"}],"summary":"Deserialization of Untrusted Data in Spring AMQP"}