OSV-2023-1001
Security exception in java.base/java.lang.String.repeat
No scoreFix available
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=63154
Crash type: Security exception
Crash state:
java.base/java.lang.String.repeat
org.springframework.expression.spel.ast.OpMultiply.getValueInternal
org.springframework.expression.spel.ast.MethodReference.getArguments
What each source reports
OSV No score
Security exception in java.base/java.lang.String.repeat
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=63154
Crash type: Security exception
Crash state:
java.base/java.lang.String.repeat
org.springframework.expression.spel.ast.OpMultiply.getValueInternal
org.springframework.expression.spel.ast.MethodReference.getArguments
- Record
OSV-2023-1001- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
spring-data-keyvalueOSS-Fuzz |
Listed versions, plus commit ranges 3.0.03.0.13.0.103.0.23.0.3 Show 20 moreShow less3.0.43.0.53.0.63.0.73.0.83.0.93.1.03.1.0-M13.1.0-M23.1.0-M33.1.0-RC13.1.13.1.23.1.33.1.43.2.0-M13.2.0-M23.2.0-M33.0.113.1.5 |
None known |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
OSV-2023-1001 is a vulnerability with no CVSS score yet in spring-data-keyvalue, published October 11, 2023. No source lists public exploit code. A source reports a fix.