{"action":"Upgrade ro.pippo:pippo-fastjson to 1.12.0 or later.","affected":[{"fixed":"1.12.0","introduced":"0"}],"component":"ro.pippo:pippo-fastjson","cve_ids":["CVE-2017-18349"],"ecosystem":"Maven","epss":0.38843,"exploited":false,"fixed_versions":["1.12.0"],"ghsa_id":"GHSA-xjrr-xv9m-4pw5","id":"tcs_01M5N9JH77VCBB0KFJ9QMVYCB1","modified_at":"2024-02-16T07:59:10.562257Z","published_at":"2018-10-24T19:42:03Z","references":["https://osv.dev/vulnerability/GHSA-xjrr-xv9m-4pw5","https://nvd.nist.gov/vuln/detail/CVE-2017-18349","https://github.com/pippo-java/pippo/issues/466","https://github.com/pippo-java/pippo/commit/8443377d3c5b35acca190a66894b4f95e4051be2","https://fortiguard.com/encyclopedia/ips/44059","https://github.com/advisories/GHSA-xjrr-xv9m-4pw5","https://github.com/alibaba/fastjson","https://github.com/alibaba/fastjson/wiki/security_update_20170315"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-xjrr-xv9m-4pw5#Maven/ro.pippo:pippo-fastjson","url":"https://osv.dev/vulnerability/GHSA-xjrr-xv9m-4pw5"}],"summary":"Improper Input Validation in alilibaba:fastjson"}