Lucene search

K
githubGitHub Advisory DatabaseGHSA-H9W3-F7X6-V54C
HistorySep 20, 2021 - 11:18 p.m.

Deserialization of Untrusted Data in com.jsoniter:jsoniter

2021-09-2023:18:54
CWE-502
GitHub Advisory Database
github.com
49
vulnerability
deserialization
untrusted data
denial of service
code execution
json strings

EPSS

0.001

Percentile

36.8%

Withdrawn

was withdrawn by its CNA. Further investigation showed that it was not a security issue.

Original Description

All versions of package com.jsoniter:jsoniter are vulnerable to Deserialization of Untrusted Data via malicious JSON strings. This may lead to a Denial of Service, and in certain cases, code execution.

Affected configurations

Vulners
Node
com.jsoniter\Matchjsoniter

EPSS

0.001

Percentile

36.8%

Related for GHSA-H9W3-F7X6-V54C