{"id":"CVE-2019-17195","aliases":["EUVD-2019-0699","GHSA-f6vf-pq8c-69m4","OESA-2021-1269","RHSA-2020:1308"],"status":"published","title":"Improper Check for Unusual or Exceptional Conditions in Connect2id Nimbus JOSE+JWT","description":"Connect2id Nimbus JOSE+JWT before v7.9 can throw various uncaught exceptions while parsing a JWT, which could result in an application crash (potential information disclosure) or a potential authentication bypass.","severity":{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-10","score":0.11121,"percentile":0.95973,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":true},"cwes":["CWE-754","CWE-755"],"published":"2019-10-15T13:42:34Z","modified":"2026-10-24T10:30:55Z","exploits":[{"source":"pocgithub","id":"somatrasss/weblogic2021","title":"somatrasss/weblogic2021","date":"2021-02-04","url":"https://github.com/somatrasss/weblogic2021"}],"fixes":[{"ecosystem":"Maven","package":"com.nimbusds:nimbus-jose-jwt","fixed_in":["7.9"],"sources":["ghsa","osv"]},{"ecosystem":"openEuler:20.03-LTS-SP1","package":"hadoop","fixed_in":["3.2.1-10.oe1"],"sources":["osv"]}],"affected":[{"source":"ghsa","ecosystem":"Maven","package":"com.nimbusds:nimbus-jose-jwt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.9"}]}]},{"source":"osv","ecosystem":"Maven","package":"com.nimbusds:nimbus-jose-jwt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.9"}]}],"versions":["2.10","2.10.1","2.11.0","2.12.0","2.13.0","2.13.1","2.14.0","2.15.0","2.15.1","2.15.2","2.16","2.17","2.17.1","2.17.2","2.18","2.18.1","2.18.2","2.19","2.19.1","2.20","2.21","2.22","2.22.1","2.23","2.24","2.25","2.26","2.26.1","2.9","3.0","3.1","3.1.1","3.1.2","3.10","3.2","3.2.1","3.2.2","3.3","3.4","3.5","3.6","3.7","3.8","3.8.1","3.8.2","3.9","3.9.1","3.9.2","4.0","4.0-rc1","4.0-rc2","4.0-rc3","4.0-rc4","4.0.1","4.1","4.1.1","4.10","4.11","4.11.1","4.11.2","4.12","4.13","4.13.1","4.14","4.15","4.15.1","4.16","4.16.1","4.16.2","4.17","4.18","4.19","4.2","4.20","4.21","4.22","4.23","4.24","4.25","4.26","4.26.1","4.27","4.27.1","4.28","4.29","4.3","4.3.1","4.30","4.31.1","4.32","4.33","4.34","4.34.1","4.34.2","4.35","4.36","4.36.1","4.37","4.37.1","4.38","4.39","4.39.1","4.39.2","4.4","4.40","4.41","4.41.1","4.41.2","4.41.3","4.5","4.6","4.7","4.8","4.9","5.0","5.1","5.10","5.11","5.12","5.13","5.14","5.2","5.3","5.4","5.5","5.6","5.7","5.8","5.9","6.0","6.0.1","6.0.2","6.1","6.1.1","6.2","6.3","6.3.1","6.4","6.4.1","6.4.2","6.5","6.5.1","6.6","6.7","6.8","7.0","7.0.1","7.1","7.2.1","7.3","7.4","7.5","7.5.1","7.6","7.7","7.8","7.8.1"]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP1","package":"hadoop","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.1-10.oe1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::hypervisor","package":"apache-commons-beanutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.3-15.el7_7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::hypervisor","package":"apache-commons-beanutils-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.3-15.el7_7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhev_manager:4.3","package":"ovirt-engine","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.9.3-0.1.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhev_manager:4.3","package":"ovirt-engine-backend","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.9.3-0.1.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhev_manager:4.3","package":"ovirt-engine-dbscripts","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.9.3-0.1.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhev_manager:4.3","package":"ovirt-engine-extensions-api-impl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.9.3-0.1.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhev_manager:4.3","package":"ovirt-engine-extensions-api-impl-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.9.3-0.1.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhev_manager:4.3","package":"ovirt-engine-health-check-bundler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.9.3-0.1.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhev_manager:4.3","package":"ovirt-engine-restapi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.9.3-0.1.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhev_manager:4.3","package":"ovirt-engine-setup","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.9.3-0.1.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhev_manager:4.3","package":"ovirt-engine-setup-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.9.3-0.1.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhev_manager:4.3","package":"ovirt-engine-setup-plugin-cinderlib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.9.3-0.1.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhev_manager:4.3","package":"ovirt-engine-setup-plugin-ovirt-engine","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.9.3-0.1.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhev_manager:4.3","package":"ovirt-engine-setup-plugin-ovirt-engine-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.9.3-0.1.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhev_manager:4.3","package":"ovirt-engine-setup-plugin-vmconsole-proxy-helper","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.9.3-0.1.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhev_manager:4.3","package":"ovirt-engine-setup-plugin-websocket-proxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.9.3-0.1.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhev_manager:4.3","package":"ovirt-engine-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.9.3-0.1.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhev_manager:4.3","package":"ovirt-engine-tools-backup","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.9.3-0.1.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhev_manager:4.3","package":"ovirt-engine-vmconsole-proxy-helper","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.9.3-0.1.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhev_manager:4.3","package":"ovirt-engine-webadmin-portal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.9.3-0.1.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhev_manager:4.3","package":"ovirt-engine-websocket-proxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.9.3-0.1.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhev_manager:4.3","package":"python2-ovirt-engine-lib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.9.3-0.1.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhev_manager:4.3","package":"rhvm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.9.3-0.1.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhev_manager:4.3","package":"rhvm-dependencies","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.2-1.el7ev"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhev_manager:4.3","package":"ovirt-engine-extension-aaa-misc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.4-1.el7ev"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhev_manager:4.3","package":"ovirt-fast-forward-upgrade","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.0-17.el7ev"}]}],"bundled":2}],"products":[{"vendor":"apache","product":"hadoop"},{"vendor":"connect2id","product":"nimbus_jose\\+jwt"},{"vendor":"oracle","product":"communications_cloud_native_core_security_edge_protection_proxy"},{"vendor":"oracle","product":"communications_pricing_design_center"},{"vendor":"oracle","product":"data_integrator"},{"vendor":"oracle","product":"enterprise_manager_base_platform"},{"vendor":"oracle","product":"healthcare_data_repository"},{"vendor":"oracle","product":"insurance_policy_administration"},{"vendor":"oracle","product":"jd_edwards_enterpriseone_orchestrator"},{"vendor":"oracle","product":"jd_edwards_enterpriseone_tools"},{"vendor":"oracle","product":"peoplesoft_enterprise_peopletools"},{"vendor":"oracle","product":"policy_automation"},{"vendor":"oracle","product":"primavera_gateway"},{"vendor":"oracle","product":"solaris_cluster"},{"vendor":"oracle","product":"weblogic_server"}],"references":[{"url":"https://lists.apache.org/thread.html/e10d43984f39327e443e875adcd4a5049193a7c010e81971908caf41%40%3Ccommon-issues.hadoop.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://lists.apache.org/thread.html/8768553cda5838f59ee3865cac546e824fa740e82d9dc2a7fc44e80d%40%3Ccommon-dev.hadoop.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://www.oracle.com/security-alerts/cpuapr2020.html","tags":["x_refsource_MISC","x_transferred","Patch","Third Party Advisory","fix","web"]},{"url":"https://www.oracle.com/security-alerts/cpujan2021.html","tags":["x_refsource_MISC","x_transferred","Patch","Third Party Advisory","fix","web"]},{"url":"https://bitbucket.org/connect2id/nimbus-jose-jwt/src/master/SECURITY-CHANGELOG.txt","tags":["x_refsource_CONFIRM","x_transferred","Release Notes","Third Party Advisory","advisory","web"]},{"url":"https://connect2id.com/blog/nimbus-jose-jwt-7-9","tags":["x_refsource_CONFIRM","x_transferred","Release Notes","Vendor Advisory","advisory","web"]},{"url":"https://lists.apache.org/thread.html/rcac26c2d4df22341fa6ebbfe93ba1eff77d2dcd3f6106a1dc1f9ac98%40%3Cdev.avro.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://lists.apache.org/thread.html/r35f6301a3e6a56259224786dd9c2a935ba27ff6b494d15a3b66efe6a%40%3Cdev.avro.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://lists.apache.org/thread.html/r33dc233634aedb04fa77db3eb79ea12d15ca4da89fa46a1c585ecb0b%40%3Ccommits.druid.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://lists.apache.org/thread.html/r2667286c8ceffaf893b16829b9612d8f7c4ee6b30362c6c1b583e3c2%40%3Ccommits.druid.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://lists.apache.org/thread.html/r5e08837e695efd36be73510ce58ec05785dbcea077819d8acc2d990d%40%3Ccommits.druid.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://www.oracle.com/security-alerts/cpuApr2021.html","tags":["x_refsource_MISC","x_transferred","Patch","Third Party Advisory","fix","web"]},{"url":"https://www.oracle.com//security-alerts/cpujul2021.html","tags":["x_refsource_MISC","x_transferred","Patch","Third Party Advisory","fix","web"]},{"url":"https://www.oracle.com/security-alerts/cpuoct2021.html","tags":["x_refsource_MISC","x_transferred","Patch","Third Party Advisory","fix","web"]},{"url":"https://www.oracle.com/security-alerts/cpujan2022.html","tags":["x_refsource_MISC","x_transferred","Not Applicable","web"]},{"url":"https://www.oracle.com/security-alerts/cpuapr2022.html","tags":["x_refsource_MISC","x_transferred","Patch","Third Party Advisory","fix","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-17195","tags":["advisory"]},{"url":"https://lists.apache.org/thread.html/8768553cda5838f59ee3865cac546e824fa740e82d9dc2a7fc44e80d@%3Ccommon-dev.hadoop.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/e10d43984f39327e443e875adcd4a5049193a7c010e81971908caf41@%3Ccommon-issues.hadoop.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/r35f6301a3e6a56259224786dd9c2a935ba27ff6b494d15a3b66efe6a@%3Cdev.avro.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/rcac26c2d4df22341fa6ebbfe93ba1eff77d2dcd3f6106a1dc1f9ac98@%3Cdev.avro.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/r2667286c8ceffaf893b16829b9612d8f7c4ee6b30362c6c1b583e3c2@%3Ccommits.druid.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/r33dc233634aedb04fa77db3eb79ea12d15ca4da89fa46a1c585ecb0b@%3Ccommits.druid.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/r5e08837e695efd36be73510ce58ec05785dbcea077819d8acc2d990d@%3Ccommits.druid.apache.org%3E","tags":["web"]},{"url":"https://github.com/advisories/GHSA-f6vf-pq8c-69m4"},{"url":"https://bitbucket.org/connect2id/nimbus-jose-jwt","tags":["package"]},{"url":"https://openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2021-1269","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2020:1308","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#low","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1752522","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1764791","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1767483","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1789737","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1792874","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1797496","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1801310","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1808038","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1808607","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1809470","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1810527","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_1308.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-10086","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-10086","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-10086","tags":["advisory"]},{"url":"https://commons.apache.org/proper/commons-beanutils/javadocs/v1.9.4/RELEASE-NOTES.txt","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-17195","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-17195","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2019-17195","description":"Connect2id Nimbus JOSE+JWT before v7.9 can throw various uncaught exceptions while parsing a JWT, which could result in an application crash (potential information disclosure) or a potential authentication bypass.","status":"published","published":"2019-10-15T13:42:34Z","modified":"2024-08-05T01:33:17.304Z","updated_at":"2026-11-02T14:20:24.989116Z"}],"euvd":[{"id":"EUVD-2019-0699","description":"Connect2id Nimbus JOSE+JWT before v7.9 can throw various uncaught exceptions while parsing a JWT, which could result in an application crash (potential information disclosure) or a potential authentication bypass.","status":"published","published":"2019-10-15T13:42:34Z","modified":"2024-08-05T01:33:17Z","updated_at":"2026-11-03T02:40:30.885546Z"}],"ghsa":[{"id":"GHSA-f6vf-pq8c-69m4","title":"Improper Check for Unusual or Exceptional Conditions in Connect2id Nimbus JOSE+JWT","description":"Connect2id Nimbus JOSE+JWT before v7.9 can throw various uncaught exceptions while parsing a JWT, which could result in an application crash (potential information disclosure) or a potential authentication bypass.","status":"published","published":"2019-10-16T18:31:17Z","modified":"2023-02-01T05:02:40Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-754","CWE-755"],"updated_at":"2026-11-02T14:36:31.364752Z"}],"nvd":[{"id":"CVE-2019-17195","description":"Connect2id Nimbus JOSE+JWT before v7.9 can throw various uncaught exceptions while parsing a JWT, which could result in an application crash (potential information disclosure) or a potential authentication bypass.","status":"published","published":"2019-10-15T14:15:12.38Z","modified":"2026-06-17T02:23:27.107Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary"},{"version":"2.0","score":6.8,"vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-755"],"updated_at":"2026-11-02T14:05:31.860711Z"}],"osv":[{"id":"CVE-2019-17195","description":"Connect2id Nimbus JOSE+JWT before v7.9 can throw various uncaught exceptions while parsing a JWT, which could result in an application crash (potential information disclosure) or a potential authentication bypass.","status":"published","published":"2019-10-15T14:15:12.38Z","modified":"2026-10-24T10:30:55.889497394Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:44:11.673963Z"},{"id":"GHSA-f6vf-pq8c-69m4","title":"Improper Check for Unusual or Exceptional Conditions in Connect2id Nimbus JOSE+JWT","description":"Connect2id Nimbus JOSE+JWT before v7.9 can throw various uncaught exceptions while parsing a JWT, which could result in an application crash (potential information disclosure) or a potential authentication bypass.","status":"published","published":"2019-10-16T18:31:17Z","modified":"2024-03-14T05:19:45.441054Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-754","CWE-755"],"updated_at":"2026-11-02T15:46:46.006631Z"},{"id":"OESA-2021-1269","title":"hadoop security update","description":"Apache Hadoop is a framework that allows for the distributed processing of large data sets across clusters of computers using simple programming models. It is designed to scale up from single servers to thousands of machines, each offering local computation and storage.\r\n\r\nSecurity Fix(es):\r\n\r\nConnect2id Nimbus JOSE+JWT before v7.9 can throw various uncaught exceptions while parsing a JWT, which could result in an application crash (potential information disclosure) or a potential authentication bypass.(CVE-2019-17195)","status":"published","published":"2021-07-17T11:04:30Z","modified":"2026-08-18T01:15:49.145438879Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:52:38.987987Z"},{"id":"RHSA-2020:1308","title":"Red Hat Security Advisory: Red Hat Virtualization Engine security, bug fix 4.3.9","status":"published","published":"2024-09-20T13:55:34Z","modified":"2026-06-28T10:35:45Z","cvss":[{"version":"3.0","score":7.3,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","level":"high"}],"updated_at":"2026-11-02T15:53:06.535721Z"}]}}