Json-java vulnerabilities

3 known vulnerabilities in Json-java from Stleary. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  Json-java: Allocation of Resources Without Limits or Throttling

  CVE-2023-5072Oct 12, 2023StlearyEPSS 1.74%

  Denial of Service in JSON-Java versions up to and including 20230618. A bug in the parser means that an input string of modest size can lead to indefinite amounts of memory being used.

• 7.5 High severity

  Json-java: Out-of-bounds Write

  CVE-2022-45690Dec 13, 2022StlearyEPSS 1.01%

  A stack overflow in the org.json.JSONTokener.nextValue::JSONTokener.java component of hutool-json v5.8.10 allows attackers to cause a Denial of Service (DoS) via crafted JSON or XML data.

• 7.5 High severity

  Hutool: Out-of-bounds Write

  CVE-2022-45688Dec 13, 2022HutoolEPSS 1.26%

  A stack overflow in the XML.toJSONObject component of hutool-json v5.8.10 allows attackers to cause a Denial of Service (DoS) via crafted JSON or XML data.