Improper Neutralization

Overview net.minidev:json-smart is a Java JSON parser. Affected versions of this package are vulnerable to Improper Neutralization via the parseInner function in the JSONParserBase parser. An attacker can evade JSONValue.parseStrict or isValidJsonStrict by sending a valid JSON value followed by a...

Denial Of Service (DoS)

json-smart is vulnerable to denial of service DoS attacks. An unhandled NumberFormatException thrown from the function extractFloat in JSONParserBase.java allows a remote attacker to crash programs or leak sensitive information...