{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"5.2.1","last_affected":"5.2.7"}],"component":"com.googlecode.aviator:aviator","cve_ids":["CVE-2021-41862"],"ecosystem":"Maven","exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-xpv2-8ppj-79hh","id":"tcs_01M5N9JR6JMER5FSGSZZCXDTPF","modified_at":"2024-02-20T20:15:59.822052Z","published_at":"2021-10-04T20:14:31Z","references":["https://osv.dev/vulnerability/GHSA-xpv2-8ppj-79hh","https://nvd.nist.gov/vuln/detail/CVE-2021-41862","https://github.com/killme2008/aviatorscript/issues/421","https://github.com/killme2008/aviatorscript"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-xpv2-8ppj-79hh","url":"https://osv.dev/vulnerability/GHSA-xpv2-8ppj-79hh"}],"summary":"Expression injection in AviatorScript"}