{"id":"OSV-2024-1397","summary":"Security exception in org.springframework.expression.spel.ast.OpPlus.getValueInternal","details":"OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=385326423\n\n```\nCrash type: Security exception\nCrash state:\norg.springframework.expression.spel.ast.OpPlus.getValueInternal\njava.base/java.util.HashMap.get\norg.springframework.core.convert.TypeDescriptor.valueOf\n```\n","modified":"2024-12-23T00:07:37.280904Z","published":"2024-12-23T00:07:37.280500Z","withdrawn":"2024-12-23T07:56:04.073259Z","references":[{"type":"REPORT","url":"https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=385326423"}],"affected":[{"package":{"name":"spring-data-mongodb","ecosystem":"OSS-Fuzz","purl":"pkg:generic/spring-data-mongodb"},"ranges":[{"type":"GIT","repo":"https://github.com/spring-projects/spring-data-mongodb","events":[{"introduced":"954f52ca7993cc4806b6e82adc50f8d5e3ae9fb9"},{"introduced":"26d38c8a069c0cbf9b38d5d7d91f62784b81b75c"}]}],"versions":["4.2.10","4.2.11","4.2.12","4.2.4","4.2.5","4.2.6","4.2.7","4.2.8","4.2.9","4.3.0","4.3.0-M2","4.3.0-RC1","4.3.1","4.3.2","4.3.3","4.3.4","4.3.5","4.3.6","4.3.7","4.4.0","4.4.0-M1","4.4.0-RC1","4.4.1"],"ecosystem_specific":{"severity":"LOW"},"database_specific":{"source":"https://github.com/google/oss-fuzz-vulns/blob/main/vulns/spring-data-mongodb/OSV-2024-1397.yaml"}}],"schema_version":"1.7.3"}