{"action":"Upgrade tech.pegasys.discovery:discovery to 0.4.5 or later.","affected":[{"fixed":"0.4.5","introduced":"0"}],"component":"tech.pegasys.discovery:discovery","cve_ids":["CVE-2024-23688"],"ecosystem":"Maven","epss":0.00493,"exploited":false,"fixed_versions":["0.4.5"],"ghsa_id":"GHSA-w3hj-wr2q-x83g","id":"tcs_01M5N9FAQBJ2SFHS6WJVYFCWW2","modified_at":"2026-07-08T06:53:12.584371899Z","published_at":"2021-04-06T17:22:17Z","references":["https://osv.dev/vulnerability/GHSA-w3hj-wr2q-x83g","https://github.com/ConsenSys/discovery/security/advisories/GHSA-w3hj-wr2q-x83g","https://nvd.nist.gov/vuln/detail/CVE-2024-23688","https://github.com/ConsenSys/discovery","https://vulncheck.com/advisories/vc-advisory-GHSA-w3hj-wr2q-x83g"],"severity":{"label":"low"},"sources":[{"source":"osv","source_id":"GHSA-w3hj-wr2q-x83g","url":"https://osv.dev/vulnerability/GHSA-w3hj-wr2q-x83g"}],"summary":"Discovery uses the same AES/GCM Nonce throughout the session"}