{"action":"No fix published. Pin and monitor.","affected":[],"component":"com.tencyle.fixes:org.codehaus.jettison--jettison","cve_ids":[],"ecosystem":"Maven","exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-xqcq-j8w9-3pxv","id":"tcs_01M5N9JT425YSSDS1A5ZXMY08Q","modified_at":"2023-08-01T19:53:16Z","published_at":"2023-08-01T19:53:16Z","references":["https://osv.dev/vulnerability/GHSA-xqcq-j8w9-3pxv","https://github.com/tencyle-fixes/jettison/security/advisories/GHSA-xqcq-j8w9-3pxv","https://nvd.nist.gov/vuln/detail/CVE-2022-40149","https://github.com/jettison-json/jettison/issues/45","https://github.com/jettison-json/jettison/pull/49","https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=46538","https://github.com/jettison-json/jettison/releases/tag/jettison-1.5.1","https://github.com/tencyle-fixes/jettison","https://github.com/tencyle-fixes/jettison#jettison-backports-repository-by-tencyle","https://lists.debian.org/debian-lts-announce/2022/11/msg00011.html","https://www.debian.org/security/2023/dsa-5312"],"severity":{"label":"medium","score":6.5},"sources":[{"source":"osv","source_id":"GHSA-xqcq-j8w9-3pxv","url":"https://osv.dev/vulnerability/GHSA-xqcq-j8w9-3pxv"}],"summary":"Jettison parser crash by stackoverflow"}