CVE-2026-86512

CVE-2026-86512 affects java-json-tools json-patch versions up to 1.13 , specifically the CopyOperation.apply and MoveOperation.apply functions in the file src/main/java/com/github/fge/jsonpatch/CopyOperation.java (Copy Move Operations component). The root cause is improper access controls , enabl...

CVE-2026-86319

A resource consumption vulnerability in the json-patch Java library (versions up to 1.13 ) affects the JsonPatch.apply function in the Patch Operation Handler component. An attacker can trigger it remotely with no authentication or user interaction, resulting in a denial-of-service condition. The...

CVE-2026-86319 java-json-tools json-patch Patch Operation JsonPatch.java JsonPatch.apply resource consumption

A vulnerability has been found in java-json-tools json-patch up to 1.13. Affected by this vulnerability is the function JsonPatch.apply of the file src/main/java/com/github/fge/jsonpatch/JsonPatch.java of the component Patch Operation Handler. The manipulation leads to resource consumption. It is...

CVE-2026-86318

A stack-based buffer overflow vulnerability exists in the java-json-tools json-patch library (versions up to 1.13 ), specifically in the JsonMergePatch.fromJson function within JsonMergePatchDeserializer.java . The flaw can be exploited remotely with no authentication required and low complexity,...