{"action":"Upgrade commons-beanutils to 1.9.2-1 or later.","affected":[{"fixed":"1.9.2-1","introduced":"0"}],"component":"commons-beanutils","cve_ids":[],"ecosystem":"Debian","ecosystem_qualifier":"Debian:14","exploited":false,"fixed_versions":["1.9.2-1"],"id":"tcs_01M5NANKVR36KWKBWM07RB5C3Z","modified_at":"2026-10-14T19:47:23.684864921Z","published_at":"2014-04-30T10:49:03.973Z","references":["https://osv.dev/vulnerability/DEBIAN-CVE-2014-0114","https://security-tracker.debian.org/tracker/CVE-2014-0114"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"DEBIAN-CVE-2014-0114#Debian:14/commons-beanutils","url":"https://osv.dev/vulnerability/DEBIAN-CVE-2014-0114"}],"summary":"Apache Commons BeanUtils, as distributed in lib/commons-beanutils-1.8.0.jar in Apache Struts 1.x through 1.3.10 and in other products requiring commons-beanutils through 1.9.2, does not suppress the c"}