{
  "cvss": 5.3,
  "datePublished": "2024-03-10T10:00:00Z",
  "dateUpdated": "2024-03-15T18:00:00Z",
  "description": "An R package on CRAN is vulnerable to XML injection via untrusted input deserialization.",
  "id": "CRAN-2024-001",
  "metrics": {
    "cvssMetricV31": [
      {
        "cvssData": {
          "baseScore": 5.3,
          "baseSeverity": "MEDIUM",
          "version": "3.1"
        }
      }
    ]
  },
  "severity": "MEDIUM",
  "source": "osv_cran",
  "title": "CRAN: R Package XML Injection"
}