Security Bulletin: IBM webMethods BPM is vulnerable to a denial of service due to JSON-Java

Summary IBM webMethods BPM uses JSON-Java for reading and parsing of JSON data. Vulnerability Details CVEID:CVE-2023-5072 DESCRIPTION: Denial of Service in JSON-Java versions up to and including 20230618. A bug in the parser means that an input string of modest size can lead to indefinite amounts...

Security Bulletin: IBM webMethods BPM is vulnerable to a denial of service due to json-20190722.jar

Summary IBM webMethods BPM uses json-20190722.jar for reading and parsing of JSON data. Vulnerability Details CVEID:CVE-2023-5072 DESCRIPTION: Denial of Service in JSON-Java versions up to and including 20230618. A bug in the parser means that an input string of modest size can lead to indefinite...

EUVD-2022-7491

Malicious code in bioql PyPI...

CVE-2022-45689

hutool-json v5.8.10 was discovered to contain an out of memory error...

CVE-2022-45688

A stack overflow in the XML.toJSONObject component of hutool-json v5.8.10 allows attackers to cause a Denial of Service DoS via crafted JSON or XML data...

CVE-2022-45690

A stack overflow in the org.json.JSONTokener.nextValue::JSONTokener.java component of hutool-json v5.8.10 allows attackers to cause a Denial of Service DoS via crafted JSON or XML data...

SUSE CVE-2022-45688

A stack overflow in the XML.toJSONObject component of hutool-json v5.8.10 allows attackers to cause a Denial of Service DoS via crafted JSON or XML data...

DoS (Denial of Service) org.json:json Dependency in Jira Software Data Center and Server

This High severity org.json:json Dependency vulnerability was introduced in versions 8.20.0, 8.22.0, 9.0.0, 9.1.0, 9.2.0, 9.3.0, 9.4.0, 9.5.0, 9.6.0, 9.7.0, 9.8.0, and 9.9.0 of Jira Software Data Center and Server. This org.json:json Dependency vulnerability, with a CVSS Score of 7.5 and a CVSS...

hutool-json Vulnerability in Bitbucket Data Center and Server

This High severity Third-Party Dependency vulnerability was introduced in versions 7.17.0, 7.21.0, 8.7.0, 8.8.0, 8.9.0, 8.10.0, 8.11.0, and 8.12.0 of Bitbucket Data Center and Server. This Third-Party Dependency vulnerability, with a CVSS Score of 7.5 and a CVSS Vector of...

hutool-json JSONTokener Heap Buffer Overflow DoS

The vulnerability in the org.json.JSONTokener.nextValue::JSONTokener.java component of the file and network operations library hutool-json is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to cause service failures...

hutool-json Heap Buffer Overflow DoS

The vulnerability of the hutool-json library for file processing and network operations is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to cause service failures...

hutool-json XML.toJSONObject DoS

The vulnerability of the XML.toJSONObject component in the library for file processing and network operations in hutool-json is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to cause service failures...

cn.hutool:hutool-dfa (4.1.15), cn.hutool:hutool-http (4.1.15) potentially affected by CVE-2023-42278 via cn.hutool:hutool-json (4.1.15)

cn.hutool:hutool-json MAVEN version 4.1.15 is affected by a known vulnerability. The following packages have a transitive dependency on cn.hutool:hutool-json and may be impacted: - cn.hutool:hutool-dfa 4.1.15 - cn.hutool:hutool-http 4.1.15 Source cves: CVE-2023-42278 Source advisory:...

cn.hutool:hutool-bom (4.6.4), cn.hutool:hutool-dfa (4.6.4) +1 more potentially affected by CVE-2023-42278 via cn.hutool:hutool-json (4.6.4)

cn.hutool:hutool-json MAVEN version 4.6.4 is affected by a known vulnerability. The following packages have a transitive dependency on cn.hutool:hutool-json and may be impacted: - cn.hutool:hutool-bom 4.6.4 - cn.hutool:hutool-dfa 4.6.4 - cn.hutool:hutool-http 4.6.4 Source cves: CVE-2023-42278...

cn.hutool:hutool-dfa (4.0.2), cn.hutool:hutool-http (4.0.2) potentially affected by CVE-2023-42278 via cn.hutool:hutool-json (4.0.2)

cn.hutool:hutool-json MAVEN version 4.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on cn.hutool:hutool-json and may be impacted: - cn.hutool:hutool-dfa 4.0.2 - cn.hutool:hutool-http 4.0.2 Source cves: CVE-2023-42278 Source advisory:...

cn.hutool:hutool-dfa (4.4.3), cn.hutool:hutool-http (4.4.3) potentially affected by CVE-2023-42278 via cn.hutool:hutool-json (4.4.3)

cn.hutool:hutool-json MAVEN version 4.4.3 is affected by a known vulnerability. The following packages have a transitive dependency on cn.hutool:hutool-json and may be impacted: - cn.hutool:hutool-dfa 4.4.3 - cn.hutool:hutool-http 4.4.3 Source cves: CVE-2023-42278 Source advisory:...

cn.hutool:hutool-bom (4.6.7), cn.hutool:hutool-dfa (4.6.7) +2 more potentially affected by CVE-2023-42278 via cn.hutool:hutool-json (4.6.7)

cn.hutool:hutool-json MAVEN version 4.6.7 is affected by a known vulnerability. The following packages have a transitive dependency on cn.hutool:hutool-json and may be impacted: - cn.hutool:hutool-bom 4.6.7 - cn.hutool:hutool-dfa 4.6.7 - cn.hutool:hutool-http 4.6.7 - cn.virens:virens-utils-common...

cn.hutool:hutool-dfa (4.1.21), cn.hutool:hutool-http (4.1.21) +5 more potentially affected by CVE-2023-42278 via cn.hutool:hutool-json (4.1.21)

cn.hutool:hutool-json MAVEN version 4.1.21 is affected by a known vulnerability. The following packages have a transitive dependency on cn.hutool:hutool-json and may be impacted: - cn.hutool:hutool-dfa 4.1.21 - cn.hutool:hutool-http 4.1.21 - com.zhouzifei:common-tool =1.0.1.release, =1.0.1, =1.0....

cn.hutool:hutool-bom (4.6.14), cn.hutool:hutool-dfa (4.6.14) +1 more potentially affected by CVE-2023-42278 via cn.hutool:hutool-json (4.6.14)

cn.hutool:hutool-json MAVEN version 4.6.14 is affected by a known vulnerability. The following packages have a transitive dependency on cn.hutool:hutool-json and may be impacted: - cn.hutool:hutool-bom 4.6.14 - cn.hutool:hutool-dfa 4.6.14 - cn.hutool:hutool-http 4.6.14 Source cves: CVE-2023-42278...

cn.hutool:hutool-dfa (4.5.11), cn.hutool:hutool-http (4.5.11) potentially affected by CVE-2023-42278 via cn.hutool:hutool-json (4.5.11)

cn.hutool:hutool-json MAVEN version 4.5.11 is affected by a known vulnerability. The following packages have a transitive dependency on cn.hutool:hutool-json and may be impacted: - cn.hutool:hutool-dfa 4.5.11 - cn.hutool:hutool-http 4.5.11 Source cves: CVE-2023-42278 Source advisory:...