{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0"}],"component":"libspring-java","cve_ids":[],"ecosystem":"Debian","ecosystem_qualifier":"Debian:14","exploited":false,"fixed_versions":[],"id":"tcs_01M5NKQM2JKGGN44MNC4PNWNZ2","modified_at":"2026-09-15T09:03:07.367930281Z","published_at":"2024-12-04T21:15:24.103Z","references":["https://osv.dev/vulnerability/DEBIAN-CVE-2024-38829","https://security-tracker.debian.org/tracker/CVE-2024-38829"],"severity":{"label":"low","score":3.7},"sources":[{"source":"osv","source_id":"DEBIAN-CVE-2024-38829#Debian:14/libspring-java","url":"https://osv.dev/vulnerability/DEBIAN-CVE-2024-38829"}],"summary":"A vulnerability in Spring LDAP allows data exposure for case sensitive comparisons.This issue affects Spring LDAP: from 2.4.0 through 2.4.3, from 3.0.0 through 3.0.9, from 3.1.0 through 3.1.7, from 3."}