PT-2026-54936

🗓️ 02 Jul 2026 00:00:00Reported by Positive TechnologiesType

ptsecurity🔗 dbugs.ptsecurity.com👁 22 Views

Eclipse Parsson before 1.1.8 allowed unbounded JSON parsing, enabling DoS; 1.1.8 adds a 15 million character limit.

Reporter	Title	Published	Views	Family All 25
IBM Security Bulletins	Security Bulletin: IBM WebSphere Application Server Liberty, which is bundled with IBM Enterprise Application Runtimes, is affected by a denial of service vulnerability due to Eclipse Parsson (CVE-2026-9563)	9 Jul 202618:04	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Engineering Lifecycle Management products using WebSphere Application Server Liberty is affected by a denial of service vulnerability due to Eclipse Parsson (CVE-2026-9563)	5 Aug 202606:36	–	ibm
IBM Security Bulletins	Security Bulletin: Eclipse parsson security vulnerability in FileNet Content Manager reported for BAI-EVENTS-JAVA-SDK	12 Aug 202612:50	–	ibm
IBM Security Bulletins	Security Bulletin: IBM SPSS Analytic Server is affected by multiple vulnerabilities in IBM WebSphere Application Server Liberty	10 Aug 202619:09	–	ibm
IBM Security Bulletins	Security Bulletin: IBM WebSphere Application Server Liberty is affected by a denial of service vulnerability due to Eclipse Parsson (CVE-2026-9563)	7 Jul 202619:50	–	ibm
IBM Security Bulletins	Security Bulletin: IBM WebSphere Application Server Liberty, which is bundled with IBM WebSphere Hybrid Edition, is affected by a denial of service vulnerability due to Eclipse Parsson (CVE-2026-9563)	9 Jul 202618:04	–	ibm
IBM Security Bulletins	Security Bulletin: IBM i is Affected By Multiple Vulnerabilities in IBM WebSphere Application Server Liberty	22 Jul 202614:20	–	ibm
IBM Security Bulletins	Security Bulletin: Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access	10 Aug 202609:49	–	ibm
IBM Security Bulletins	Security Bulletin: Eclipse Parsson JSON Parser Denial of Service via Unbounded Input	7 Aug 202610:53	–	ibm
IBM Security Bulletins	Security Bulletin: SPSS Collaboration and Deployment Services is affected by multiple vulnerabilities in IBM WebSphere Application Server Liberty	24 Jul 202604:47	–	ibm

Source	Link
repo	www.repo.maven.apache.org/maven2/org/eclipse/parsson/parsson/1.1.8
github	www.github.com/eclipse-ee4j/parsson/pull/169
github	www.github.com/eclipse-ee4j/parsson/commit/134e8d101aa74c8b9302d0cb62f6ccb4912a9d0c
t	www.t.me/CVEtracker/58681
gitlab	www.gitlab.eclipse.org/security/vulnerability-reports/-/work_items/444
t	www.t.me/cveNotify/184770
github	www.github.com/eclipse-ee4j/parsson/tree/1.1.8
t	www.t.me/cveNotify/184436
twitter	www.twitter.com/knaepp/status/2074872433715114306
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-9563

08 Jul 2026 00:00Current

5.9Medium risk

Vulners AI Score5.9

CVSS 3.17.5

EPSS0.00346