{"action":"Upgrade org.springframework:spring-core to 3.0.0.RELEASE or later.","affected":[{"fixed":"3.0.0.RELEASE","introduced":"1.1.0"}],"component":"org.springframework:spring-core","cve_ids":["CVE-2009-1190"],"ecosystem":"Maven","epss":0.02796,"exploited":false,"fixed_versions":["3.0.0.RELEASE"],"ghsa_id":"GHSA-wjjr-h4wh-w6vv","id":"tcs_01M5N9GMQDM9V9XGSQ7E9GQ1PK","modified_at":"2024-12-07T05:40:55.645419Z","published_at":"2022-05-02T03:22:35Z","references":["https://osv.dev/vulnerability/GHSA-wjjr-h4wh-w6vv","https://nvd.nist.gov/vuln/detail/CVE-2009-1190","https://bugzilla.redhat.com/show_bug.cgi?id=497161","https://exchange.xforce.ibmcloud.com/vulnerabilities/50083","http://www.packetstormsecurity.org/hitb06/DAY_1_-_Marc_Schoenefeld_-_Pentesting_Java_J2EE.pdf","http://www.springsource.com/securityadvisory"],"severity":{"label":"medium"},"sources":[{"source":"osv","source_id":"GHSA-wjjr-h4wh-w6vv","url":"https://osv.dev/vulnerability/GHSA-wjjr-h4wh-w6vv"}],"summary":"Spring Framework Inefficient Regular Expression Complexity"}