{"id":"CVE-2023-36480","summary":"Aerospike Java Client vulnerable to unsafe deserialization of server responses","details":"The Aerospike Java client is a Java application that implements a network protocol to communicate with an Aerospike server. Prior to versions 7.0.0, 6.2.0, 5.2.0, and 4.5.0 some of the messages received from the server contain Java objects that the client deserializes when it encounters them without further validation. Attackers that manage to trick clients into communicating with a malicious server can include especially crafted objects in its responses that, once deserialized by the client, force it to execute arbitrary code. This can be abused to take control of the machine the client is running on. Versions 7.0.0, 6.2.0, 5.2.0, and 4.5.0 contain a patch for this issue.","aliases":["GHSA-jj95-55cr-9597"],"modified":"2026-08-12T14:50:48.863959Z","published":"2023-08-04T14:29:34.806Z","database_specific":{"cna_assigner":"GitHub_M","cwe_ids":["CWE-502"],"osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/36xxx/CVE-2023-36480.json"},"references":[{"type":"WEB","url":"https://github.com/aerospike/aerospike-client-java/blob/e40a49b3db0d2b3d45068910e1cb9d917c795315/client/src/com/aerospike/client/async/AsyncRead.java#L68"},{"type":"WEB","url":"https://github.com/aerospike/aerospike-client-java/blob/e40a49b3db0d2b3d45068910e1cb9d917c795315/client/src/com/aerospike/client/async/NettyCommand.java#L1157"},{"type":"WEB","url":"https://github.com/aerospike/aerospike-client-java/blob/e40a49b3db0d2b3d45068910e1cb9d917c795315/client/src/com/aerospike/client/async/NettyCommand.java#L489"},{"type":"WEB","url":"https://github.com/aerospike/aerospike-client-java/blob/e40a49b3db0d2b3d45068910e1cb9d917c795315/client/src/com/aerospike/client/async/NettyCommand.java#L596"},{"type":"WEB","url":"https://github.com/aerospike/aerospike-client-java/blob/e40a49b3db0d2b3d45068910e1cb9d917c795315/client/src/com/aerospike/client/command/Buffer.java#L53"},{"type":"WEB","url":"https://github.com/aerospike/aerospike-client-java/blob/e40a49b3db0d2b3d45068910e1cb9d917c795315/client/src/com/aerospike/client/command/Command.java#L2083"},{"type":"WEB","url":"https://github.com/aerospike/aerospike-client-java/blob/e40a49b3db0d2b3d45068910e1cb9d917c795315/client/src/com/aerospike/client/util/Unpacker.java#L227"},{"type":"WEB","url":"https://support.aerospike.com/s/article/CVE-2023-36480-Aerospike-Java-Client-vulnerable-to-unsafe-deserialization-of-server-responses"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/36xxx/CVE-2023-36480.json"},{"type":"ADVISORY","url":"https://github.com/aerospike/aerospike-client-java/security/advisories/GHSA-jj95-55cr-9597"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2023-36480"},{"type":"FIX","url":"https://github.com/aerospike/aerospike-client-java/commit/02bf28e62fb186f004c82c87b219db2fc5b8262a"},{"type":"FIX","url":"https://github.com/aerospike/aerospike-client-java/commit/51c65e32837da29435161a2d9c09bbdc2071ecae"},{"type":"FIX","url":"https://github.com/aerospike/aerospike-client-java/commit/66aafb4cd743cf53baffaeaf69b035f51d2e2e36"},{"type":"FIX","url":"https://github.com/aerospike/aerospike-client-java/commit/80c508cc5ecb0173ce92d7fab8cfab5e77bd9900"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/aerospike/aerospike-client-java","events":[{"introduced":"0"},{"fixed":"17de60227f7d454a3542764d2829a0f6fdec8fe3"},{"introduced":"2b91cfbe532761cff9b89fe948c749282bcd63bd"},{"fixed":"861d16892220ac0eb1cf5e201338e86da8a0642f"},{"introduced":"30be5e0366a66edc78339d9e01232fc2f42722c1"},{"fixed":"561b53a0cf1bb35393d0113c2016707464ca9472"},{"fixed":"02bf28e62fb186f004c82c87b219db2fc5b8262a"},{"fixed":"51c65e32837da29435161a2d9c09bbdc2071ecae"},{"fixed":"66aafb4cd743cf53baffaeaf69b035f51d2e2e36"},{"fixed":"80c508cc5ecb0173ce92d7fab8cfab5e77bd9900"}],"database_specific":{"cpe":"cpe:2.3:a:aerospike:aerospike_java_client:*:*:*:*:*:*:*:*","extracted_events":[{"introduced":"0"},{"fixed":"4.5.0"},{"introduced":"5.0.0"},{"fixed":"5.2.0"},{"introduced":"6.0.0"},{"fixed":"6.2.0"}],"source":["CPE_RANGE","REFERENCES"]}}],"versions":["6.1.8","4.4.18","5.1.11","6.1.11","4.4.20","6.1.10","6.1.9","6.1.6","6.1.7","6.1.5","6.1.4","6.1.3","6.1.2","6.1.1","6.1.0","6.0.1","6.0.0","4.4.19","5.1.10","5.1.9","5.1.8","5.1.7","5.1.6","5.1.5","5.1.4","5.1.0","5.1.3","5.1.2","5.1.1","5.0.7","5.0.6","5.0.5","5.0.4","5.0.3","5.0.2","5.0.1","5.0.0","4.4.17","4.4.16","4.4.15","4.4.14","4.4.13","4.4.12","4.4.11","4.4.10","4.4.9","4.4.8","4.4.7","4.4.6","4.4.5","4.4.4","4.4.3","4.4.2","4.4.1","4.4.0","4.3.1","4.3.0","4.2.3","4.2.2","4.2.1","4.2.0","4.1.11","4.1.10","4.1.9","4.1.8","4.1.7","4.1.6","4.1.5","4.1.4","4.1.3","4.1.2","4.1.1","4.1.0","4.0.8","4.0.7","4.0.6","4.0.5","4.0.4","4.0.3","4.0.2","4.0.1","4.0.0","3.3.4","3.3.3","3.3.2","3.3.1","3.3.0","3.2.5","3.2.4","3.2.3","3.2.2","3.2.1","3.2.0","3.1.9","3.1.8","3.1.7","3.1.6","3.1.5","3.1.4","3.1.3","3.1.2","3.1.1","3.1.0","3.0.35","3.0.34","3.0.33","3.0.32","3.0.31","3.0.30","3.0.29","3.0.28","3.0.27","3.0.26","3.0.25","3.0.24","3.0.23","3.0.22","3.0.21","3.0.15","3.0.14","3.0.12","3.0.11","3.0.10","3.0.9","3.0.8","3.0.7","3.0.6","3.0.5","3.0.4","3.0.3","3.0.2","3.0.1","3.0.0","2.2.0","2.1.16","2.1.15","2.1.14","2.1.12","2.1.11","2.1.10","2.1.9","2.1.8","2.1.7","2.1.6","2.1.5","2.1.4","2.1.3","2.1.2","2.1.1","2.1.0"],"database_specific":{"vanir_signatures_modified":"2026-08-12T14:50:48Z","vanir_signatures":[{"target":{"file":"client/src/com/aerospike/client/command/Buffer.java","function":"bytesToObject"},"deprecated":false,"digest":{"function_hash":"176028410761977426121960378402433733927","length":329},"id":"CVE-2023-36480-00b5259f","signature_type":"Function","signature_version":"v1","source":"https://github.com/aerospike/aerospike-client-java/commit/51c65e32837da29435161a2d9c09bbdc2071ecae"},{"id":"CVE-2023-36480-06f08e53","signature_type":"Function","signature_version":"v1","source":"https://github.com/aerospike/aerospike-client-java/commit/80c508cc5ecb0173ce92d7fab8cfab5e77bd9900","target":{"file":"test/src/com/aerospike/test/sync/basic/TestAdd.java","function":"addNullValue"},"deprecated":false,"digest":{"function_hash":"190023691734974902229150631918933534943","length":486}},{"digest":{"function_hash":"293295841509431405419820344594305818914","length":305},"id":"CVE-2023-36480-11898f58","signature_type":"Function","signature_version":"v1","source":"https://github.com/aerospike/aerospike-client-java/commit/51c65e32837da29435161a2d9c09bbdc2071ecae","target":{"file":"client/src/com/aerospike/client/Value.java","function":"estimateSize"},"deprecated":false},{"deprecated":false,"digest":{"line_hashes":["321838860380536702154504683748601022149","68646747222009890451782724703791949873","258217464543278906768942579281194433938","328206490576485556361107636971974199413","240725320775688809975083084166322313720","99261060793362741911695353591701031240","231130894400919824489208481141854872398","43846552067453399210923317666258063469","27994058087283346999722131112449245234","50192915190496648378170858676497560274","117424720005655173972426292035305501479","123284785327384641758566104133234273214","237869061879587168163824205369015865080","241622450652878339992174036475894267168","68530195858023473093227849586358970031","282728292841507424933625592664983678402","177732426137160226230229253624173403879","59159856025000342582156622876408324567","284024572243385283066716304266822674445","81293186434220894078160319850804544721","95161765050208984141205854303810131027","203542816355157388721991479938117949127","317791012265486829735964483220558848194","46813096540173321083955093199985539347","238275389122141831103640392604367843248","49570435985116085114251014806535251423","29634786698586007205709068122299859528","38181569459417498106848079844088816342","171943541724040344260838251498615829724"],"threshold":0.9},"id":"CVE-2023-36480-15aac4b9","signature_type":"Line","signature_version":"v1","source":"https://github.com/aerospike/aerospike-client-java/commit/51c65e32837da29435161a2d9c09bbdc2071ecae","target":{"file":"client/src/com/aerospike/client/util/Packer.java"}},{"target":{"file":"client/src/com/aerospike/client/Value.java","function":"serialize"},"deprecated":false,"digest":{"function_hash":"312551778009426920552374574002038821578","length":358},"id":"CVE-2023-36480-18384f3a","signature_type":"Function","signature_version":"v1","source":"https://github.com/aerospike/aerospike-client-java/commit/66aafb4cd743cf53baffaeaf69b035f51d2e2e36"},{"digest":{"line_hashes":["234453415094379385211934062951064797442","30146414746920131684720192871048743328","191039989612115059045858320687228285969","36012295084141316088013369398438255470","23414824028149594234682290104829791008","85768220258422090115743416928177704636","220204612904494249952671543442148772123","27435903630533070686503238341587441124"],"threshold":0.9},"id":"CVE-2023-36480-188250a9","signature_type":"Line","signature_version":"v1","source":"https://github.com/aerospike/aerospike-client-java/commit/80c508cc5ecb0173ce92d7fab8cfab5e77bd9900","target":{"file":"test/src/com/aerospike/test/SuiteSync.java"},"deprecated":false},{"deprecated":false,"digest":{"function_hash":"267486045588617785949779366877289927892","length":461},"id":"CVE-2023-36480-18d23fe1","signature_type":"Function","signature_version":"v1","source":"https://github.com/aerospike/aerospike-client-java/commit/80c508cc5ecb0173ce92d7fab8cfab5e77bd9900","target":{"file":"client/src/com/aerospike/client/command/Buffer.java","function":"bytesToObject"}},{"source":"https://github.com/aerospike/aerospike-client-java/commit/51c65e32837da29435161a2d9c09bbdc2071ecae","target":{"file":"client/src/com/aerospike/client/Value.java"},"deprecated":false,"digest":{"line_hashes":["137253360813140647963685026244764323868","277202749992049066199229992448731590240","118198728206435007916761356557491053648","53036869529749151354192195644207002156","84410030790728772990172166045385377103","222385665078096978377028261820286618303","287925737875209490938020021372349084112","112237377018293489994983343331509649284","318032172299327429895419376175129376747","337347472686606310572619247675842512462","38877241754065287822319498460824472016","92923039233222717911435867303662130426","283695867277556439938012108341808984856","200429209901253051186876564534734998917","191517392292679134570909491422983442108","242848293427893644828061648613879417256","231725113428839711814357867117061097706"],"threshold":0.9},"id":"CVE-2023-36480-1fb4078b","signature_type":"Line","signature_version":"v1"},{"signature_version":"v1","source":"https://github.com/aerospike/aerospike-client-java/commit/02bf28e62fb186f004c82c87b219db2fc5b8262a","target":{"file":"client/src/com/aerospike/client/util/Packer.java"},"deprecated":false,"digest":{"line_hashes":["321838860380536702154504683748601022149","68646747222009890451782724703791949873","258217464543278906768942579281194433938","328206490576485556361107636971974199413","240725320775688809975083084166322313720","99261060793362741911695353591701031240","231130894400919824489208481141854872398","43846552067453399210923317666258063469","166679094071478178478654363057761183851","335984595415389025294143941024300709955","170463042739750648972688613380857470425","177732426137160226230229253624173403879","59159856025000342582156622876408324567","284024572243385283066716304266822674445","81293186434220894078160319850804544721","95161765050208984141205854303810131027","203542816355157388721991479938117949127","317791012265486829735964483220558848194","46813096540173321083955093199985539347","238275389122141831103640392604367843248","49570435985116085114251014806535251423","29634786698586007205709068122299859528","38181569459417498106848079844088816342","171943541724040344260838251498615829724"],"threshold":0.9},"id":"CVE-2023-36480-2f907945","signature_type":"Line"},{"deprecated":false,"digest":{"line_hashes":["111662301084791741605606006175826904814","326105610450635089719875732295445263371","29212775264354082053727226403532692822","27308385771278650162940921936785270063","147512682846469920972800844600557320359","271737471576845462144992447353561669677","315624216050755448887813231665195594978","180341422623126187943655181642397695658"],"threshold":0.9},"id":"CVE-2023-36480-395aa8f6","signature_type":"Line","signature_version":"v1","source":"https://github.com/aerospike/aerospike-client-java/commit/80c508cc5ecb0173ce92d7fab8cfab5e77bd9900","target":{"file":"client/src/com/aerospike/client/lua/LuaUnpacker.java"}},{"deprecated":false,"digest":{"function_hash":"282273277839174947813532024142891008682","length":1583},"id":"CVE-2023-36480-420f2286","signature_type":"Function","signature_version":"v1","source":"https://github.com/aerospike/aerospike-client-java/commit/80c508cc5ecb0173ce92d7fab8cfab5e77bd9900","target":{"file":"examples/src/com/aerospike/examples/Serialize.java","function":"testList"}},{"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["163500546549748093879391457441973533311","295919028424916198357728363148979680470","29118756178307327915927837218074781667","111556714809696058295023350011958387149","286060073300392779309586906820639749652","193092400238773362815572314283196801782","92470516499503437623928172517555396767","143094857914139101420953299994957507663","170664594650355560227033769097920731482","162256328878346170324053622936610016997","262518722017251723910737726959951662560","42691020497546850301533328116925557335","189788980862054032560949137818617437984","112400490745273004236933668094947517420","217660407232298684114520592081559428325","283114606746806935120879700835357697177","164892141614262703387750822220481608293","65124341050513843455025963317457436538","116681780834650599049080766169276311531","330369813084156214405747511402187335860","100446544817466822552082713874857690715","298309965650211063706609181290812092190","202686334055351600307790082199289234336","250238819989728426626293718259931261803","237889970748637290453962646566877831126","108506631340114201941620525961774859399","160130944577896040748877048140825247385","64606816411686261431917348997376952828","193064155581363150910869612253144471963","7783356956793331912757755186520744229","322723720873801606018828665464942355122","190731520009436841920765368946513601253","262608383610759382267216443590783229880","281072289479513315191508857484498833620","317376778726345922005337248475715427034","83353675344107011907286433668179984437","226683206939417453566835619910585979302","60835747315105660881904930751098887211","173152619126577349687063406846787032357","307464655258944966111262447665470420108","24501234535006697431234705038672472381","63051095562863931718344229438805604562","76881628019051255518015042547011995035","142426597143495054831689175620293242634","43432908323909473688038563583346176857","76894441311203480147378877733706398779","308808435831306408606625270097051099028","166740945171109286207182805400058438138","31447133738607400058691367060843041914","126239272242369414544032255347361527137","49797514565213429124421180622731768282","225347306099820859871825092305656445132","318679739011639741637393047197410832074","203886774377831862120254480212061832136","59778460128474106657548542287556724036","241432094984225077912448645934807048952","245294349856305813891234134686076180477","331589318327566504737749689931731877851","322723720873801606018828665464942355122","190731520009436841920765368946513601253","262608383610759382267216443590783229880","289686657067536179218688561312669369026","295850607442788322434740158916230678660","307177453706021021577139086723895278201","314262644306141120141208683872939752499","202703908091922120174433310062120065110","195912917243383327563338607378841838731","185569519265898016969920830139535232882","62954303743009799004625476633860354558","32320824615867125324390403931971960103","209279999269563654946239373622270482074","24501234535006697431234705038672472381","328056555451783133182135656691957526629","85146855332460269761711052263272968446","64603742473911998499472091985381714155","271456504087501103674066365249192253556","339303745616319215405808830802750177621","188884382999564752292013473940444045840","208116271431502457131284694422458849003","238864809049622890944034007926107455094","80902032655011465535238326678329905221","207330653848628202811395150489838330727","85537741455325210352131633475671466095","118230073480992593238736805016683173246","219866009477038007018231932702580709035","36381277795442951873991282882059221580","98206889549202936417313225884300215597","278099466810138804908811781898843369661","334471529448493207540788057554879615209","16786363655466167230468267852797439955","182423519554657091508798340734603014774","276784258444737376781638728274328936390","50097779372677530437127547755568975437","128708337823931668645154776461391632151","73037731766679407129228610129381184652","245294349856305813891234134686076180477","331589318327566504737749689931731877851","322723720873801606018828665464942355122","190731520009436841920765368946513601253","153395286753698510717900578632222946020","302647918098323919829039316459638711099","132764621345595707853343111539481065690","200843426313118344528651793657200708968","331109601708228405497376979630169410708","114061459029327354124948018905970565856","31681980574463836680746135865949424451"]},"id":"CVE-2023-36480-48d9a3d8","signature_type":"Line","signature_version":"v1","source":"https://github.com/aerospike/aerospike-client-java/commit/80c508cc5ecb0173ce92d7fab8cfab5e77bd9900","target":{"file":"test/src/com/aerospike/test/sync/basic/TestSerialize.java"}},{"signature_type":"Line","signature_version":"v1","source":"https://github.com/aerospike/aerospike-client-java/commit/80c508cc5ecb0173ce92d7fab8cfab5e77bd9900","target":{"file":"client/src/com/aerospike/client/command/Buffer.java"},"deprecated":false,"digest":{"line_hashes":["251273845275495670907300832392218213799","50038390933717041130055573244863678909","237393306805185445692721370748988999026","71515641802132753243749368900413661571","293787406488329018999006312581310596531","19905602240019718588639723514929426688","94462016062936210320875411062054954184","238140452183379097614543899998135517684","146596326842836086590824827998769887469","246920315626148142386818911520738447412","210858331704693488632257706619872204769","186564381605795391832879061435547255474","63572294591097065208649483596640323661","111070852005315672633270956378337468704","78177097764242655686773336365397431123","294261567747420211169457132649885467318","24379406149580905848263935504045693786","339606865693097792594288420774460869934","21806493040993203892787332194480199049","316827850211752751096349402232981911176","56584138772663512010242833604527735621","325706197498488946673096221678594732268","248240809593059574638206552618160840372","277351967912713222513000650871469411374","28030338483444067829285571178120000439","170496967850839023481299094005860776895","69252848598902848230626441263585415452"],"threshold":0.9},"id":"CVE-2023-36480-4fa260fc"},{"deprecated":false,"digest":{"line_hashes":["13958507898046818775102125117940460359","4440115166550969972380728173399816124","186153253357592855785743993452941490483","119557414706780260871403777070067225998","336533117598920650858998160458122499058","219018011499581118430291163404987411336","213039597541033965211920836536014154180","297648085729236956904598575214480671403","136473520598238993746320284234219542077","334016823352919590577054565677687873161","109754460644666287875587437169808324621","74978078306804815620530594212318735126","285434691019046421434164306755641094253","325706197498488946673096221678594732268","248240809593059574638206552618160840372","24361960652493854986792194446708375737","109079943713708945320083018046111646306","274606565582948915735087919041309549814","36227080468805272372986867130577061027"],"threshold":0.9},"id":"CVE-2023-36480-4fef9949","signature_type":"Line","signature_version":"v1","source":"https://github.com/aerospike/aerospike-client-java/commit/66aafb4cd743cf53baffaeaf69b035f51d2e2e36","target":{"file":"client/src/com/aerospike/client/util/Unpacker.java"}},{"deprecated":false,"digest":{"line_hashes":["251273845275495670907300832392218213799","50038390933717041130055573244863678909","237393306805185445692721370748988999026","63572294591097065208649483596640323661","111070852005315672633270956378337468704","78177097764242655686773336365397431123","294261567747420211169457132649885467318","24379406149580905848263935504045693786","339606865693097792594288420774460869934","21806493040993203892787332194480199049","316827850211752751096349402232981911176","56584138772663512010242833604527735621","325706197498488946673096221678594732268","248240809593059574638206552618160840372","277351967912713222513000650871469411374","28030338483444067829285571178120000439","170496967850839023481299094005860776895"],"threshold":0.9},"id":"CVE-2023-36480-5a111d72","signature_type":"Line","signature_version":"v1","source":"https://github.com/aerospike/aerospike-client-java/commit/66aafb4cd743cf53baffaeaf69b035f51d2e2e36","target":{"file":"client/src/com/aerospike/client/command/Buffer.java"}},{"id":"CVE-2023-36480-5ac309f3","signature_type":"Line","signature_version":"v1","source":"https://github.com/aerospike/aerospike-client-java/commit/80c508cc5ecb0173ce92d7fab8cfab5e77bd9900","target":{"file":"client/src/com/aerospike/client/lua/LuaInstance.java"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["44907614248946025110176873293353590608","340239212522959895019235316767771765719","89418593274468778672567619761455808353","199187200594986452174789814476995252882","26092304308632086348024712151172750746","218208908733821515169157802703011535457","83575924956943777866517907800029576793"]}},{"source":"https://github.com/aerospike/aerospike-client-java/commit/80c508cc5ecb0173ce92d7fab8cfab5e77bd9900","target":{"file":"client/src/com/aerospike/client/util/Unpacker.java","function":"unpackBlob"},"deprecated":false,"digest":{"function_hash":"249553833871958965497971140652281190517","length":909},"id":"CVE-2023-36480-619c5457","signature_type":"Function","signature_version":"v1"},{"deprecated":false,"digest":{"line_hashes":["231681155510105315471247173115116947323","94728839170011768771231880161967387294","237849558385377037248429165413089170554","317408975759535929783684893068049968172","249393826605732327272467436479213056757","170664594650355560227033769097920731482","2658290858760361364713029460244944513","242312648944509602246479697465792014530","296952498688959135144971788289266194804","234253990165035728142719463915704351190","193725075123842293777248196222564479004","28509871523079735876009176613067600094","112723352878349607304532755894015829274","131162141185575140873782479973965333399","233272238123263320759785213672710131187","283778772389749045812322828754353479309","143226188534141550687786658172884852679","175755464142294573414118523647278507427","170930490763989596377376281164715922306","308249342338989956904244769737906514424","239759333906318921021151156747062265199","33716522590805510078583354986676253025","20705770105778388105684997638161644031","330369813084156214405747511402187335860","36766900903139617127332623561233453170","251114486278398454087693781292444678413","114292533745241170775526583408234663747","330261041415968611240682312938015345589","308058512502814044259100670068615031028","157125772669906083069049425172417733894","178280403945188708626935364882760482791","242685822118813191505520922130980590172","122558110190647590074889241146850740636","259985079007998061508609483553185530976","144470402030359669711964951230388520607","324226854802401159341728774002349771120","106833775912315994364598462942230527906","248802485380497028402054147021163566932","193064155581363150910869612253144471963","267181624401937679928268585323863597714","84570905910307859522073079111992641670","234013061028672158557868138793800573966","102408109875343070917399757534632472494","306204498239873596423814349035485222549","261594147346180095387492936122491130131","179793100030934527737877616933893277368","259054448606700793336522299124751206589","206959751652915367071617479170285376257","162494624764625968871353196542850077722","23747454488152162435445614378371838639","1564931261641888896607989856857084680","102598721422098297077805569841219409939","191423687695282424216196650182853107698","209278400216695881370381540661122971459","85443823112021174153548452679086926172","177471152911126264699860896396082781741","45812866313483030944606645993507281123","4172103922368149623780768903435948254","246845889853131606415428510611239689706","283101314859949837916749123054993548989","103709833000630411753388771134652830787","254418284498291002442401485935947861413","166740945171109286207182805400058438138","322873223039359783120880874883446828023","199842214032464347720687068997444494616","255513504837820081581764611527477601258","155546483945169897975800014684686409100","5690129709790535177010100657506568369","215742297510616309950828600316078841791","114171294324469977258813127613604923067","242685822118813191505520922130980590172","122558110190647590074889241146850740636","259985079007998061508609483553185530976","228541984005040940921316063401025920549","293731134627387971561543227710865310410","94143519237830505494429853129229171487","339892682652479117534559154079700451746","245294349856305813891234134686076180477","323549788097729617938116571879216741715","84570905910307859522073079111992641670","234013061028672158557868138793800573966","102408109875343070917399757534632472494","280483128805377605402253706704403467916","90198623972551826536264459986441417173","155622924749534761603742879329063237484","72580797181423190919432906042667321231","100803117947986612989043200179461405031","57934907533410892180326824449137928172","156671506372819755907205677473622755033","40235377205284090433578537538224864135","186323691991543184345695508706082537593","57982180111867746472038402285287017250","22011417816739375333375876584556577916","237086094453945611946518518634713863684","163695412375784349172193717822500845335","11331327776751239715292239559578642655","209553025393757926950023337767493993647","158605235642389143866346007207669563718","291714595708559266157782006460215519843","195953879287240480295647517942844950484","87316203003022436916558510346728921782","291240125193499442023028780742036672228","248551484532765501263700978135506495071","208116271431502457131284694422458849003","238864809049622890944034007926107455094","80902032655011465535238326678329905221","207330653848628202811395150489838330727","85537741455325210352131633475671466095","118230073480992593238736805016683173246","219866009477038007018231932702580709035","36381277795442951873991282882059221580","98206889549202936417313225884300215597","278099466810138804908811781898843369661","269791122579279053855602772199826316529","282783264879262203817961955840011818113","62822546739797712280479401992151251712","287406365795925727259484331611452133295","328029759828806723571240601822248655963","131263009791878052725350589948320022581","242685822118813191505520922130980590172","122558110190647590074889241146850740636","259985079007998061508609483553185530976","77920246358658194202249957734479231441","126155561921313885807452061442444803110","76888539561509772074984857235691947792","59078700012470377801843958400535672610","245294349856305813891234134686076180477","323549788097729617938116571879216741715","84570905910307859522073079111992641670","234013061028672158557868138793800573966","102408109875343070917399757534632472494","12879855064710736523382412627494129519","132442914960812551795392444109630741138","319390548883989270851975577276862231110","80863876979984944709629046529623081650","154041455545253811154248156029213954206","157563468951757422920854567329561012760","60265532669400793917849926019791289317","298542572144304269960944842639908089404","72624067641872185075827648988607226755","286344272951787547853183385281406642762","252058240224898497357498893171045277122","258235559553218713582652092315714548391"],"threshold":0.9},"id":"CVE-2023-36480-6692c8eb","signature_type":"Line","signature_version":"v1","source":"https://github.com/aerospike/aerospike-client-java/commit/80c508cc5ecb0173ce92d7fab8cfab5e77bd9900","target":{"file":"examples/src/com/aerospike/examples/Serialize.java"}},{"digest":{"function_hash":"284311338233496432965207863138672023478","length":1353},"id":"CVE-2023-36480-69a4b779","signature_type":"Function","signature_version":"v1","source":"https://github.com/aerospike/aerospike-client-java/commit/80c508cc5ecb0173ce92d7fab8cfab5e77bd9900","target":{"function":"packObject","file":"client/src/com/aerospike/client/util/Packer.java"},"deprecated":false},{"signature_version":"v1","source":"https://github.com/aerospike/aerospike-client-java/commit/51c65e32837da29435161a2d9c09bbdc2071ecae","target":{"file":"client/src/com/aerospike/client/command/Buffer.java"},"deprecated":false,"digest":{"line_hashes":["271398665468767587423542362765259504654","164963902856434814501561248606833845440","262921804434337598805049441530997954247","172152916286062702013427665789184054752","108765918644708415621475370432143312934","293020038146390654416316498677707248708","3157310762621136952285970884300761083","263045848717658872188729298670714198596","26752265523856148237804265128479863116","150278600062683347111087456602147917543","934778633023146558815817542627115327","92039261713287546714810115168607110699","223995666413101145041353059750620603980","148576083179957385751042777247851896741","200429209901253051186876564534734998917","191517392292679134570909491422983442108","28030338483444067829285571178120000439","170496967850839023481299094005860776895"],"threshold":0.9},"id":"CVE-2023-36480-706a56c7","signature_type":"Line"},{"deprecated":false,"digest":{"function_hash":"74962960349159721145530533214365488903","length":1538},"id":"CVE-2023-36480-828c836e","signature_type":"Function","signature_version":"v1","source":"https://github.com/aerospike/aerospike-client-java/commit/80c508cc5ecb0173ce92d7fab8cfab5e77bd9900","target":{"file":"client/src/com/aerospike/client/lua/LuaInstance.java","function":"getLuaValue"}},{"id":"CVE-2023-36480-868eb0fb","signature_type":"Line","signature_version":"v1","source":"https://github.com/aerospike/aerospike-client-java/commit/80c508cc5ecb0173ce92d7fab8cfab5e77bd9900","target":{"file":"client/src/com/aerospike/client/command/ParticleType.java"},"deprecated":false,"digest":{"line_hashes":["34631518368052693538599804891133733079","333216116523845548080400257476422220949","70064172715789983235932146027376189257","111463721549364535896647912314230037972","10127751312237357836423016448478352568","88035479326145519607872199559465588317","200118514386319312455068504739295406215","18237421208482015878968010933490545080"],"threshold":0.9}},{"id":"CVE-2023-36480-8eaa62b1","signature_type":"Function","signature_version":"v1","source":"https://github.com/aerospike/aerospike-client-java/commit/02bf28e62fb186f004c82c87b219db2fc5b8262a","target":{"file":"client/src/com/aerospike/client/util/Packer.java","function":"packBlob"},"deprecated":false,"digest":{"function_hash":"163667295846206727058676199755551077797","length":396}},{"signature_type":"Function","signature_version":"v1","source":"https://github.com/aerospike/aerospike-client-java/commit/80c508cc5ecb0173ce92d7fab8cfab5e77bd9900","target":{"file":"examples/src/com/aerospike/examples/Serialize.java","function":"testArray"},"deprecated":false,"digest":{"function_hash":"280518371030048145216102750748405422924","length":1474},"id":"CVE-2023-36480-8f7ecf21"},{"digest":{"function_hash":"178265769640023051614021333444419796238","length":656},"id":"CVE-2023-36480-97fb2059","signature_type":"Function","signature_version":"v1","source":"https://github.com/aerospike/aerospike-client-java/commit/51c65e32837da29435161a2d9c09bbdc2071ecae","target":{"file":"client/src/com/aerospike/client/util/Unpacker.java","function":"unpackBlob"},"deprecated":false},{"target":{"file":"client/src/com/aerospike/client/Value.java","function":"serialize"},"deprecated":false,"digest":{"function_hash":"312551778009426920552374574002038821578","length":358},"id":"CVE-2023-36480-9b339da5","signature_type":"Function","signature_version":"v1","source":"https://github.com/aerospike/aerospike-client-java/commit/80c508cc5ecb0173ce92d7fab8cfab5e77bd9900"},{"source":"https://github.com/aerospike/aerospike-client-java/commit/80c508cc5ecb0173ce92d7fab8cfab5e77bd9900","target":{"file":"client/src/com/aerospike/client/util/Unpacker.java"},"deprecated":false,"digest":{"line_hashes":["13958507898046818775102125117940460359","4440115166550969972380728173399816124","186153253357592855785743993452941490483","119557414706780260871403777070067225998","312231491488959039153601026205140302746","336533117598920650858998160458122499058","219018011499581118430291163404987411336","213039597541033965211920836536014154180","297648085729236956904598575214480671403","136473520598238993746320284234219542077","334016823352919590577054565677687873161","109754460644666287875587437169808324621","74978078306804815620530594212318735126","285434691019046421434164306755641094253","325706197498488946673096221678594732268","248240809593059574638206552618160840372","24361960652493854986792194446708375737","109079943713708945320083018046111646306","274606565582948915735087919041309549814","36227080468805272372986867130577061027","249076771669200505419328802633628800577","257405313891176064694619123101591585912","161037632209619689853948652760007567373","274498870723017181774442508284336838844","307915878218990894216140289152220552513","321121317811726006696788436774705335198","53978822380104996173300427150858688212","84090497748300370502336468503785863095","187232928100113184146350923292460414029","178954796027026741581371844145792440507","137940587453605516841815058731689841797"],"threshold":0.9},"id":"CVE-2023-36480-a0bac78d","signature_type":"Line","signature_version":"v1"},{"signature_version":"v1","source":"https://github.com/aerospike/aerospike-client-java/commit/02bf28e62fb186f004c82c87b219db2fc5b8262a","target":{"file":"client/src/com/aerospike/client/Value.java","function":"estimateSize"},"deprecated":false,"digest":{"function_hash":"293295841509431405419820344594305818914","length":305},"id":"CVE-2023-36480-ac1dc1d5","signature_type":"Function"},{"deprecated":false,"digest":{"line_hashes":["271398665468767587423542362765259504654","164963902856434814501561248606833845440","262921804434337598805049441530997954247","172152916286062702013427665789184054752","108765918644708415621475370432143312934","293020038146390654416316498677707248708","3157310762621136952285970884300761083","263045848717658872188729298670714198596","26752265523856148237804265128479863116","150278600062683347111087456602147917543","934778633023146558815817542627115327","92039261713287546714810115168607110699","223995666413101145041353059750620603980","148576083179957385751042777247851896741","200429209901253051186876564534734998917","191517392292679134570909491422983442108","28030338483444067829285571178120000439","170496967850839023481299094005860776895"],"threshold":0.9},"id":"CVE-2023-36480-ad28e4ce","signature_type":"Line","signature_version":"v1","source":"https://github.com/aerospike/aerospike-client-java/commit/02bf28e62fb186f004c82c87b219db2fc5b8262a","target":{"file":"client/src/com/aerospike/client/command/Buffer.java"}},{"signature_version":"v1","source":"https://github.com/aerospike/aerospike-client-java/commit/80c508cc5ecb0173ce92d7fab8cfab5e77bd9900","target":{"file":"examples/src/com/aerospike/examples/OperateMap.java"},"deprecated":false,"digest":{"line_hashes":["134531899204120329002855835647811602684","185453371478289346471990481630599013144","172561803459792366147681203269908637095","86932610306905987857761611872080053165","178400405803374314131763781165768744870","276261812936966009650239969789218442075","286530016493043392934380204076533570672","126318749101975171946647144586462792636","238806090272638074172203464808783087315","154735488007742152326593535469713146654","273319150387647124418870615910868486038","311963802518798634917616351080879043708","89537605205671053038895025599937568257","186519977664456089441695221507576358251","165701864881169015376261268676999657824","297344817167167482305920795344335903825","224658354024984102598405686614737641076","219854055537107654489366222682888921479","334119935004012280185422621784124413717","128824863076002836186510888663691938972"],"threshold":0.9},"id":"CVE-2023-36480-b8feeb43","signature_type":"Line"},{"target":{"file":"client/src/com/aerospike/client/util/Unpacker.java"},"deprecated":false,"digest":{"line_hashes":["13958507898046818775102125117940460359","4440115166550969972380728173399816124","186153253357592855785743993452941490483","119557414706780260871403777070067225998","302134667555296082631861451774352603691","268208037292820707450159978379527490571","203984054763845169958142350296152222007","86589906278622165901099237019323352205","179669705741452758821823455284775332027","40658630475873068769204077508726972136","66939242654139609835611385473146802208","272367123637079415737636158149363980652","249876548857935259538748739243812824814","41812670851987372534230014834308915822","36227080468805272372986867130577061027"],"threshold":0.9},"id":"CVE-2023-36480-c27c8d30","signature_type":"Line","signature_version":"v1","source":"https://github.com/aerospike/aerospike-client-java/commit/51c65e32837da29435161a2d9c09bbdc2071ecae"},{"digest":{"function_hash":"82973010050454707727209687830941966906","length":1741},"id":"CVE-2023-36480-cec06be0","signature_type":"Function","signature_version":"v1","source":"https://github.com/aerospike/aerospike-client-java/commit/80c508cc5ecb0173ce92d7fab8cfab5e77bd9900","target":{"file":"examples/src/com/aerospike/examples/Serialize.java","function":"testComplex"},"deprecated":false},{"id":"CVE-2023-36480-cf8eef42","signature_type":"Line","signature_version":"v1","source":"https://github.com/aerospike/aerospike-client-java/commit/80c508cc5ecb0173ce92d7fab8cfab5e77bd9900","target":{"file":"test/src/com/aerospike/test/sync/basic/TestAdd.java"},"deprecated":false,"digest":{"line_hashes":["40238587300432371409713305444919865616","186583031051883588497382474785196067456","21448270408847550140024035057522732479","235716077893581826322672162488700566558","194587529044619322340727167003313348279","308660944485726645621180382175045374887","247856093505582053786577729231758230015","43726780869463840217961822525184431143"],"threshold":0.9}},{"deprecated":false,"digest":{"function_hash":"267486045588617785949779366877289927892","length":461},"id":"CVE-2023-36480-d055aa95","signature_type":"Function","signature_version":"v1","source":"https://github.com/aerospike/aerospike-client-java/commit/66aafb4cd743cf53baffaeaf69b035f51d2e2e36","target":{"function":"bytesToObject","file":"client/src/com/aerospike/client/command/Buffer.java"}},{"deprecated":false,"digest":{"function_hash":"172616970178786723975465112930107710639","length":185},"id":"CVE-2023-36480-d79fbb54","signature_type":"Function","signature_version":"v1","source":"https://github.com/aerospike/aerospike-client-java/commit/80c508cc5ecb0173ce92d7fab8cfab5e77bd9900","target":{"file":"client/src/com/aerospike/client/util/Packer.java","function":"packBlob"}},{"signature_type":"Line","signature_version":"v1","source":"https://github.com/aerospike/aerospike-client-java/commit/02bf28e62fb186f004c82c87b219db2fc5b8262a","target":{"file":"client/src/com/aerospike/client/util/Unpacker.java"},"deprecated":false,"digest":{"line_hashes":["13958507898046818775102125117940460359","4440115166550969972380728173399816124","186153253357592855785743993452941490483","119557414706780260871403777070067225998","302134667555296082631861451774352603691","268208037292820707450159978379527490571","203984054763845169958142350296152222007","86589906278622165901099237019323352205","179669705741452758821823455284775332027","40658630475873068769204077508726972136","66939242654139609835611385473146802208","272367123637079415737636158149363980652","249876548857935259538748739243812824814","41812670851987372534230014834308915822","36227080468805272372986867130577061027"],"threshold":0.9},"id":"CVE-2023-36480-d9aa83a9"},{"signature_version":"v1","source":"https://github.com/aerospike/aerospike-client-java/commit/80c508cc5ecb0173ce92d7fab8cfab5e77bd9900","target":{"file":"test/src/com/aerospike/test/sync/basic/TestSerialize.java","function":"serializeComplex"},"deprecated":false,"digest":{"function_hash":"90804096816131862869690702466948496934","length":1093},"id":"CVE-2023-36480-d9d636fa","signature_type":"Function"},{"source":"https://github.com/aerospike/aerospike-client-java/commit/80c508cc5ecb0173ce92d7fab8cfab5e77bd9900","target":{"file":"examples/src/com/aerospike/examples/Main.java"},"deprecated":false,"digest":{"line_hashes":["229964385490630006566201050677197048967","79983579564873716672407601841883888956","229923892743042896139058014918918866563","29127446926983017376643726734413587586"],"threshold":0.9},"id":"CVE-2023-36480-dd6269ef","signature_type":"Line","signature_version":"v1"},{"source":"https://github.com/aerospike/aerospike-client-java/commit/02bf28e62fb186f004c82c87b219db2fc5b8262a","target":{"file":"client/src/com/aerospike/client/Value.java"},"deprecated":false,"digest":{"line_hashes":["137253360813140647963685026244764323868","277202749992049066199229992448731590240","118198728206435007916761356557491053648","53036869529749151354192195644207002156","84410030790728772990172166045385377103","222385665078096978377028261820286618303","287925737875209490938020021372349084112","112237377018293489994983343331509649284","318032172299327429895419376175129376747","337347472686606310572619247675842512462","38877241754065287822319498460824472016","92923039233222717911435867303662130426","283695867277556439938012108341808984856","200429209901253051186876564534734998917","191517392292679134570909491422983442108","242848293427893644828061648613879417256","231725113428839711814357867117061097706"],"threshold":0.9},"id":"CVE-2023-36480-e146b5aa","signature_type":"Line","signature_version":"v1"},{"deprecated":false,"digest":{"line_hashes":["137253360813140647963685026244764323868","277202749992049066199229992448731590240","118198728206435007916761356557491053648","94731510768542194524096496524131870783","223234148612045951714596723662198943080","92481339445319921116956555585586883109","274896805588550870453355463472726611745","111217328798218647269604990006426737010","305340761560446444793814799194755291859","22138315399923360781154400714464685672","147655434769626451486942487243929745182","289172228261060123866508577238736282397","265013226319561372556765807425091652396","284194225630773511589779360578214954274","248240809593059574638206552618160840372","277351967912713222513000650871469411374","242848293427893644828061648613879417256","231725113428839711814357867117061097706"],"threshold":0.9},"id":"CVE-2023-36480-e5e17197","signature_type":"Line","signature_version":"v1","source":"https://github.com/aerospike/aerospike-client-java/commit/66aafb4cd743cf53baffaeaf69b035f51d2e2e36","target":{"file":"client/src/com/aerospike/client/Value.java"}},{"deprecated":false,"digest":{"function_hash":"176028410761977426121960378402433733927","length":329},"id":"CVE-2023-36480-e8a351bf","signature_type":"Function","signature_version":"v1","source":"https://github.com/aerospike/aerospike-client-java/commit/02bf28e62fb186f004c82c87b219db2fc5b8262a","target":{"file":"client/src/com/aerospike/client/command/Buffer.java","function":"bytesToObject"}},{"signature_type":"Function","signature_version":"v1","source":"https://github.com/aerospike/aerospike-client-java/commit/66aafb4cd743cf53baffaeaf69b035f51d2e2e36","target":{"file":"client/src/com/aerospike/client/util/Unpacker.java","function":"unpackBlob"},"deprecated":false,"digest":{"function_hash":"249553833871958965497971140652281190517","length":909},"id":"CVE-2023-36480-eaf094dd"},{"signature_type":"Line","signature_version":"v1","source":"https://github.com/aerospike/aerospike-client-java/commit/80c508cc5ecb0173ce92d7fab8cfab5e77bd9900","target":{"file":"client/src/com/aerospike/client/Bin.java"},"deprecated":false,"digest":{"line_hashes":["188675558558393280742089126094450901481","200793675881700806985295457463827859867","162533896410347535297887444525338842985","51378448954984357102880705538880674284","136889938873721625647036889295241577802","329513100031480426671168376180640816423","294180411671848730386510649071457180407","269069639685051588387057484657803493598","169632850618932285215055376804665245312","95591967490173881769810446018708439167"],"threshold":0.9},"id":"CVE-2023-36480-ec44fda9"},{"signature_version":"v1","source":"https://github.com/aerospike/aerospike-client-java/commit/80c508cc5ecb0173ce92d7fab8cfab5e77bd9900","target":{"file":"client/src/com/aerospike/client/util/Packer.java"},"deprecated":false,"digest":{"line_hashes":["59917134127567250688372735828442576917","219195733463163698604472999809680577077","277491243368519232446055111383601305941","87725602471703077425411074613909484537","46876757135872352725570589774711836806","308639892626726382467630239559559141019","276442994937815183323482323088984591356","237210560756835340268191964303852895110","222802576434223457246842003240672979335","29634786698586007205709068122299859528","38181569459417498106848079844088816342","171943541724040344260838251498615829724","180980152867661725380057956388270568411","167562978534790113010220201085938217094","235751233396297507656964274176992307853","115043038802682041411592516879427130807","253351915407672502929817241047334763589"],"threshold":0.9},"id":"CVE-2023-36480-f4ec62ac","signature_type":"Line"},{"deprecated":false,"digest":{"length":656,"function_hash":"178265769640023051614021333444419796238"},"id":"CVE-2023-36480-f942edc7","signature_type":"Function","signature_version":"v1","source":"https://github.com/aerospike/aerospike-client-java/commit/02bf28e62fb186f004c82c87b219db2fc5b8262a","target":{"function":"unpackBlob","file":"client/src/com/aerospike/client/util/Unpacker.java"}},{"source":"https://github.com/aerospike/aerospike-client-java/commit/51c65e32837da29435161a2d9c09bbdc2071ecae","target":{"file":"client/src/com/aerospike/client/util/Packer.java","function":"packBlob"},"deprecated":false,"digest":{"function_hash":"296614233512237052824102654254275638745","length":370},"id":"CVE-2023-36480-fc7393d7","signature_type":"Function","signature_version":"v1"},{"deprecated":false,"digest":{"line_hashes":["137253360813140647963685026244764323868","277202749992049066199229992448731590240","118198728206435007916761356557491053648","215827166001916134874156990193043107122","4600704457580607028619259760455816218","248628423664239203874064858353493033696","22543761883095518781634316130381547648","152081078491257971244684963547622887301","327783481418369793984904818427736847467","119929690436848571818603606260834440217","41416827004709705316938299603033295101","292188344648894666101986822296096018496","129523705023898988121999925087380619937","188438475785320331201280360613654713070","114869913738596360210016194738437533681","182466293113338616662841449332137830593","74016850777209477259651141977543979098","182102157568465744340511252114190071987","48371071334333387142034031913156946250","127811078818070842358156940169527793959","249247450380534592512906585029150888401","121667927140071447856335856602094349386","181947708296767607128842495264413181130","262449860057401209488657559210212669607","304014033747062243467596102940485200661","94757906259778985061601006901931649559","64105104571498431813050288296968564529","115341180599619729218803527212718703156","261578860818191211332168911338692111261","186889145674926659492396690399530182260","94731510768542194524096496524131870783","223234148612045951714596723662198943080","92481339445319921116956555585586883109","274896805588550870453355463472726611745","111217328798218647269604990006426737010","305340761560446444793814799194755291859","22138315399923360781154400714464685672","147655434769626451486942487243929745182","289172228261060123866508577238736282397","265013226319561372556765807425091652396","284194225630773511589779360578214954274","248240809593059574638206552618160840372","277351967912713222513000650871469411374","242848293427893644828061648613879417256","231725113428839711814357867117061097706","203151837138218058243317180880939456328","12129184346243856201912867879898897375","305511713651448903913183474066060718347","16519968598123651348729537410513713575","302370843871826718808361482286044522045","84212293335357608561430057757075290513","286612900328393823279315245331204269291","172078017970565377400525967337649813496","27733657225444255741762525404574929860","37602450041034695051238979594884420999","76704536118847501625055984200155869575","234403219158604620154310586370399856127","86441810353726171553498402801744545931","109466673342230427789581976963660187083","244128597339132836358927163620464365915","31868488283077143771208464613932261335","102538243573958716116277604280384370946","274065011415549330902565676854708932874","130733660304139365167845648220524056050","333109359655081878137831448683295877411","51821274065635018369900451873303201143","186847633045636259136338434268525836892","295464015571258653426725175544929383663","78963911209697756048542458164955900487","107129213879513563917909539763802405917","132177994901533350250250458029034436190","16870632363414609274486084943067422779","3113620026831016194707572985494089166","141351464566953471660004498264612734081","208314592577687141105352392983869202958","113329471385085223988621110914944732032","7674761443901337214391358194461810538","36062656730872813495653760875514712458","53569376665167669275114025946065312489","298565761204871401986530405944169967862","65407956170312364178516275975586235912","216024862339292280504578020114462022823","185951077618236814948820706973456154545","213944227503915448664815717189910224762","245793197214925292281708635987860219608","305009551156939562184993875181922832109"],"threshold":0.9},"id":"CVE-2023-36480-fd15b75c","signature_type":"Line","signature_version":"v1","source":"https://github.com/aerospike/aerospike-client-java/commit/80c508cc5ecb0173ce92d7fab8cfab5e77bd9900","target":{"file":"client/src/com/aerospike/client/Value.java"}}],"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-36480.json"}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"}]}