com.cedarsoftware:n-cube (>=2.9.2, <=2.9.3) potentially affected by CVE-2023-34610 via com.cedarsoftware:json-io (2.7.0)

com.cedarsoftware:json-io MAVEN version 2.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.cedarsoftware:json-io and may be impacted: - com.cedarsoftware:n-cube =2.9.2, =2.9.3 Source cves: CVE-2023-34610 Source advisory: OSV:GHSA-779H-3R69-4F5P...

com.cedarsoftware:n-cube (>=2.9.4, <=2.9.18) potentially affected by CVE-2023-34610 via com.cedarsoftware:json-io (2.7.1)

com.cedarsoftware:json-io MAVEN version 2.7.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.cedarsoftware:json-io and may be impacted: - com.cedarsoftware:n-cube =2.9.4, =2.9.18 Source cves: CVE-2023-34610 Source advisory: OSV:GHSA-779H-3R69-4F5P...

com.cedarsoftware:json-command-servlet (>=1.1.1, <=1.1.2), com.cedarsoftware:n-cube (>=3.0.0, <=3.0.10) +1 more potentially affected by CVE-2023-34610 via com.cedarsoftware:json-io (2.7.3)

com.cedarsoftware:json-io MAVEN version 2.7.3 is affected by a known vulnerability. The following packages have a transitive dependency on com.cedarsoftware:json-io and may be impacted: - com.cedarsoftware:json-command-servlet =1.1.1, =3.0.0, =3.0.10 - ph.samson.maven:cpages-maven-plugin 0.0.1...

com.cedarsoftware:n-cube (3.1.0) potentially affected by CVE-2023-34610 via com.cedarsoftware:json-io (2.7.6)

com.cedarsoftware:json-io MAVEN version 2.7.6 is affected by a known vulnerability. The following packages have a transitive dependency on com.cedarsoftware:json-io and may be impacted: - com.cedarsoftware:n-cube 3.1.0 Source cves: CVE-2023-34610 Source advisory: OSV:GHSA-779H-3R69-4F5P...

com.cedarsoftware:json-command-servlet (1.2.0), com.cedarsoftware:n-cube (3.1.1) potentially affected by CVE-2023-34610 via com.cedarsoftware:json-io (2.8.0)

com.cedarsoftware:json-io MAVEN version 2.8.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.cedarsoftware:json-io and may be impacted: - com.cedarsoftware:json-command-servlet 1.2.0 - com.cedarsoftware:n-cube 3.1.1 Source cves: CVE-2023-34610...

com.cedarsoftware:n-cube (>=3.1.2, <=3.1.3) potentially affected by CVE-2023-34610 via com.cedarsoftware:json-io (2.9.0)

com.cedarsoftware:json-io MAVEN version 2.9.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.cedarsoftware:json-io and may be impacted: - com.cedarsoftware:n-cube =3.1.2, =3.1.3 Source cves: CVE-2023-34610 Source advisory: OSV:GHSA-779H-3R69-4F5P...

com.cedarsoftware:n-cube (>=3.1.4, <=3.1.7), com.picscout.depend:dependency (0.0.1) potentially affected by CVE-2023-34610 via com.cedarsoftware:json-io (2.9.3)

com.cedarsoftware:json-io MAVEN version 2.9.3 is affected by a known vulnerability. The following packages have a transitive dependency on com.cedarsoftware:json-io and may be impacted: - com.cedarsoftware:n-cube =3.1.4, =3.1.7 - com.picscout.depend:dependency 0.0.1 Source cves: CVE-2023-34610...

com.cedarsoftware:n-cube (3.1.6) potentially affected by CVE-2023-34610 via com.cedarsoftware:json-io (3.0.1)

com.cedarsoftware:json-io MAVEN version 3.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.cedarsoftware:json-io and may be impacted: - com.cedarsoftware:n-cube 3.1.6 Source cves: CVE-2023-34610 Source advisory: OSV:GHSA-779H-3R69-4F5P...

com.cedarsoftware:json-command-servlet (1.2.4) potentially affected by CVE-2023-34610 via com.cedarsoftware:json-io (3.0.2)

com.cedarsoftware:json-io MAVEN version 3.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on com.cedarsoftware:json-io and may be impacted: - com.cedarsoftware:json-command-servlet 1.2.4 Source cves: CVE-2023-34610 Source advisory:...

co.cloudcheflabs.chango:chango-client (>=1.1.0, <=2.0.5), com.cedarsoftware:json-command-servlet (>=1.2.5, <=1.9.1) +74 more potentially affected by CVE-2023-34610 via com.cedarsoftware:json-io (>=4.0.0, <=4.14.0)

com.cedarsoftware:json-io MAVEN version =4.0.0, =1.1.0, =1.2.5, =3.2.0, =0.0.1, =2.0.602, =1.0.8, =1.0.8, =1.0.8, =4.2.2-alpha.1, =4.2.2-alpha, =4.3.4-alpha, =4.3.10 - com.liveramp.workflow2:workflowmonitor 1.0 - com.liveramp.workflow2:workflowstate 1.0 - com.liveramp.workflow2:workflowui 1.0 and...

CVE-2023-34610

An issue was discovered json-io thru 4.14.0 allows attackers to cause a denial of service or other unspecified impacts via crafted object that uses cyclic dependencies...

CVE-2023-34610

An issue was discovered json-io thru 4.14.0 allows attackers to cause a denial of service or other unspecified impacts via crafted object that uses cyclic dependencies...

json-io 缓冲区错误漏洞

json-io is a json, java conversion library from the individual developer John DeRegnaucourt. A security vulnerability exists in json-io version 4.14.0 and earlier, which stems from a vulnerability that allows an attacker to cause a denial of service through the use of objects with cyclic...

PT-2023-24947 · Json-Io · Json-Io

Name of the Vulnerable Software and Affected Versions: json-io versions 4.14.0 and earlier Description: An issue was discovered that allows attackers to cause a denial of service or other unspecified impacts via a crafted object that uses cyclic dependencies. Recommendations: For json-io versions...

CVE-2023-34610

An issue was discovered json-io thru 4.14.0 allows attackers to cause a denial of service or other unspecified impacts via crafted object that uses cyclic dependencies...

CVE-2023-34610

An issue was discovered json-io thru 4.14.0 allows attackers to cause a denial of service or other unspecified impacts via crafted object that uses cyclic dependencies...

CVE-2023-34610: Out-of-bounds Write

An issue was discovered json-io thru 4.14.0 allows attackers to cause a denial of service or other unspecified impacts via crafted object that uses cyclic dependencies...

CVE-2023-34610

CVE-2023-34610 affects json-io up to version 4.14.0. A crafted object that uses cyclic dependencies can cause a denial of service or other unspecified impacts; root cause is the vulnerability in handling cyclic object graphs. Public references show a related advisory and issue detail (e.g., GitHu...

CVE-2023-34610

An issue was discovered json-io thru 4.14.0 allows attackers to cause a denial of service or other unspecified impacts via crafted object that uses cyclic dependencies...

co.cloudcheflabs.chango:chango-client (>=1.1.0, <=2.0.5), com.adobe.ride:ride-core (>=1.0.3, <=2.0.0) +105 more potentially affected by CVE-2023-34610 via com.cedarsoftware:json-io (>=2.2.29, <=4.14.0)

com.cedarsoftware:json-io MAVEN version =2.2.29, =1.1.0, =1.0.3, =1.0.3, =1.2.0, =1.0.0, =2.0.0, =0.0.1, =2.0.602, =1.4.0-60, =1.2.0-43, =1.0.0-4, =1.0.0-4, =1.1.0-94, =1.2.0-165 and more Source cves: CVE-2023-34610 Source advisory: MEND:CVE-2023-34610...