{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0"}],"component":"io.spray:spray-json_2.9.3","cve_ids":["CVE-2018-18855"],"ecosystem":"Maven","exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-ww3v-6xjf-jv28","id":"tcs_01M5N9H9VE4WWES0F1XTKY92J4","modified_at":"2025-09-30T19:18:45.945287Z","published_at":"2022-06-28T23:23:20Z","references":["https://osv.dev/vulnerability/GHSA-ww3v-6xjf-jv28","https://github.com/spray/spray-json/pull/284","https://github.com/spray/spray-json","https://security.snyk.io/vuln/SNYK-JAVA-IOSPRAY-72601"],"severity":{"label":"medium"},"sources":[{"source":"osv","source_id":"GHSA-ww3v-6xjf-jv28#Maven/io.spray:spray-json_2.9.3","url":"https://osv.dev/vulnerability/GHSA-ww3v-6xjf-jv28"}],"summary":"Uncontrolled Resource Consumption in Spray JSON"}