CVE-2018-18854

Lightbend Spray spray-json (up to version 1.3.4) is vulnerable to denial of service via Algorithmic Complexity when parsing many JSON object fields with colliding hash codes. Remote attacker could exhaust resources. Documents consistently describe the issue but do not provide official remediation...

ai.agnos:reactive-sparql_2.12 (>=0.3.0, <=0.3.1), be.cetic:rts-gen_2.12 (>=0.1.3, <=0.1.13) +382 more potentially affected by CVE-2018-18854 via io.spray:spray-json_2.12 (>=1.3.2, <=1.3.4)

io.spray:spray-json2.12 MAVEN version =1.3.2, =0.3.0, =0.1.3, =0.1.14, =0.11.1, =0.15.2, =0.2.0, =0.0.82.12, =1.23.0, =0.2.0-rc5, =0.2.0-rc5, =0.2.0-rc5, =0.2.0 - com.chudsaviet.gradle.avrohugger:com.chudsaviet.gradle.avrohugger.gradle.plugin 0.2.4 - com.cra.figaro:figaro2.12 5.0.0.0 and more...