CVE-2024-23078
CriticalCVSS 9.1Exploitation Probability (EPSS)
Low risk47th percentile - higher than 47% of all known CVEs
Summary
A NullPointerException was discovered in JGraphT Core version 1.5.2 in the compare method of the ToleranceDoubleComparator class. Note: multiple third parties dispute the existence of this vulnerability, suggesting the submission may be based on an insufficiently robust tool.
Risk Assessment
The risk to the organization is low as the vulnerability is disputed and may not be a real threat. If confirmed, it could cause application crashes when processing null values.
Recommendation
Monitor official JGraphT updates and verify the report with the security team. If confirmed, update to a patched version.
Original NVD description (English source)
JGraphT Core v1.5.2 was discovered to contain a NullPointerException via the component org.jgrapht.alg.util.ToleranceDoubleComparator::compare(Double, Double). NOTE: this is disputed by multiple third parties who believe there was not reasonable evidence to determine the existence of a vulnerability. The submission may have been based on a tool that is not sufficiently robust for vulnerability identification.