{"action":"Upgrade org.codehaus.groovy:groovy to 2.4.8 or later.","affected":[{"fixed":"2.4.8","introduced":"1.7.0"}],"component":"org.codehaus.groovy:groovy","cve_ids":["CVE-2016-6814"],"ecosystem":"Maven","epss":0.17239,"exploited":false,"fixed_versions":["2.4.8"],"ghsa_id":"GHSA-xphj-m9cc-8fmq","id":"tcs_01M5N9JQ9A1J48NP85NEXZ9MHN","modified_at":"2024-10-17T16:23:10.153350Z","published_at":"2022-05-13T01:25:19Z","references":["https://osv.dev/vulnerability/GHSA-xphj-m9cc-8fmq","https://nvd.nist.gov/vuln/detail/CVE-2016-6814","https://access.redhat.com/errata/RHSA-2017:0868","https://access.redhat.com/errata/RHSA-2017:2486","https://access.redhat.com/errata/RHSA-2017:2596","https://security.gentoo.org/glsa/202003-01","https://www.oracle.com/security-alerts/cpujan2020.html","https://www.oracle.com/security-alerts/cpujul2020.html","https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html","https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html","https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html","http://mail-archives.apache.org/mod_mbox/www-announce/201701.mbox/%3CCADRx3PMZ2hBCGDTY35zYXFGaDnjAs0tc5-upaVs6QN2sYUejyA%40mail.gmail.com%3E","http://rhn.redhat.com/errata/RHSA-2017-0272.html","http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html","http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html","http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-xphj-m9cc-8fmq","url":"https://osv.dev/vulnerability/GHSA-xphj-m9cc-8fmq"}],"summary":"Deserialization of Untrusted Data in Groovy"}