Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

JSON-java - 20180130 Known vulnerabilities found #322

Open
josebarros2025 opened this issue Aug 5, 2024 · 0 comments
Open

JSON-java - 20180130 Known vulnerabilities found #322

josebarros2025 opened this issue Aug 5, 2024 · 0 comments

Comments

@josebarros2025
Copy link

josebarros2025 commented Aug 5, 2024

This library should be updated for most newer JSON dependencies, current version used has following issues detected

CVE-2023-5072
BDSA-2023-2760
Denial of Service in JSON-Java versions up to and including 20230618. A bug in the parser means that an input string of modest size can lead to indefinite amounts of memory being used.

CVE-2022-45688
BDSA-2022-4165
A stack overflow in the XML.toJSONObject component of hutool-json v5.8.10 allows attackers to cause a Denial of Service (DoS) via crafted JSON or XML data.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant