CVE-2022-45690

A stack overflow in the org.json.JSONTokener.nextValue::JSONTokener.java component of hutool-json v5.8.10 allows attackers to cause a Denial of Service DoS via crafted JSON or XML data...

cn.hutool:hutool-dfa (4.1.2), cn.hutool:hutool-http (4.1.2) potentially affected by CVE-2022-45690 via cn.hutool:hutool-json (4.1.2)

cn.hutool:hutool-json MAVEN version 4.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on cn.hutool:hutool-json and may be impacted: - cn.hutool:hutool-dfa 4.1.2 - cn.hutool:hutool-http 4.1.2 Source cves: CVE-2022-45690 Source advisory:...

cn.hutool:hutool-dfa (4.1.9), cn.hutool:hutool-http (4.1.9) +1 more potentially affected by CVE-2022-45690 via cn.hutool:hutool-json (4.1.9)

cn.hutool:hutool-json MAVEN version 4.1.9 is affected by a known vulnerability. The following packages have a transitive dependency on cn.hutool:hutool-json and may be impacted: - cn.hutool:hutool-dfa 4.1.9 - cn.hutool:hutool-http 4.1.9 - cn.virens:virens-util 1.2.4 Source cves: CVE-2022-45690...

cn.hutool:hutool-dfa (4.1.13), cn.hutool:hutool-http (4.1.13) potentially affected by CVE-2022-45690 via cn.hutool:hutool-json (4.1.13)

cn.hutool:hutool-json MAVEN version 4.1.13 is affected by a known vulnerability. The following packages have a transitive dependency on cn.hutool:hutool-json and may be impacted: - cn.hutool:hutool-dfa 4.1.13 - cn.hutool:hutool-http 4.1.13 Source cves: CVE-2022-45690 Source advisory:...

cn.hutool:hutool-dfa (4.1.15), cn.hutool:hutool-http (4.1.15) potentially affected by CVE-2022-45690 via cn.hutool:hutool-json (4.1.15)

cn.hutool:hutool-json MAVEN version 4.1.15 is affected by a known vulnerability. The following packages have a transitive dependency on cn.hutool:hutool-json and may be impacted: - cn.hutool:hutool-dfa 4.1.15 - cn.hutool:hutool-http 4.1.15 Source cves: CVE-2022-45690 Source advisory:...

cn.hutool:hutool-dfa (4.5.0), cn.hutool:hutool-http (4.5.0) potentially affected by CVE-2022-45690 via cn.hutool:hutool-json (4.5.0)

cn.hutool:hutool-json MAVEN version 4.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on cn.hutool:hutool-json and may be impacted: - cn.hutool:hutool-dfa 4.5.0 - cn.hutool:hutool-http 4.5.0 Source cves: CVE-2022-45690 Source advisory:...

cn.hutool:hutool-dfa (4.1.14), cn.hutool:hutool-http (4.1.14) +2 more potentially affected by CVE-2022-45690 via cn.hutool:hutool-json (4.1.14)

cn.hutool:hutool-json MAVEN version 4.1.14 is affected by a known vulnerability. The following packages have a transitive dependency on cn.hutool:hutool-json and may be impacted: - cn.hutool:hutool-dfa 4.1.14 - cn.hutool:hutool-http 4.1.14 - cn.virens:virens-oauth2 =1.0.0, =1.2.5, =1.3.2 Source...

club.mrxiao:express-java-common (>=1.0.0, <=1.0.2), club.mrxiao:express-java-jdl (>=1.0.0, <=1.0.2) +22 more potentially affected by CVE-2022-45690 via cn.hutool:hutool-json (4.6.2)

cn.hutool:hutool-json MAVEN version 4.6.2 is affected by a known vulnerability. The following packages have a transitive dependency on cn.hutool:hutool-json and may be impacted: - club.mrxiao:express-java-common =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =2.0.3, =2.0.5, =2.0.1.b, =2.0.1.b, =2.0.1.b,...

club.mrxiao:tool-garbage (1.0.1), cn.hutool:hutool-bom (4.6.10) +21 more potentially affected by CVE-2022-45690 via cn.hutool:hutool-json (4.6.10)

cn.hutool:hutool-json MAVEN version 4.6.10 is affected by a known vulnerability. The following packages have a transitive dependency on cn.hutool:hutool-json and may be impacted: - club.mrxiao:tool-garbage 1.0.1 - cn.hutool:hutool-bom 4.6.10 - cn.hutool:hutool-dfa 4.6.10 - cn.hutool:hutool-http...

cn.hutool:hutool-bom (4.6.3), cn.hutool:hutool-dfa (4.6.3) +1 more potentially affected by CVE-2022-45690 via cn.hutool:hutool-json (4.6.3)

cn.hutool:hutool-json MAVEN version 4.6.3 is affected by a known vulnerability. The following packages have a transitive dependency on cn.hutool:hutool-json and may be impacted: - cn.hutool:hutool-bom 4.6.3 - cn.hutool:hutool-dfa 4.6.3 - cn.hutool:hutool-http 4.6.3 Source cves: CVE-2022-45690...

cn.hutool:hutool-bom (4.6.7), cn.hutool:hutool-dfa (4.6.7) +2 more potentially affected by CVE-2022-45690 via cn.hutool:hutool-json (4.6.7)

cn.hutool:hutool-json MAVEN version 4.6.7 is affected by a known vulnerability. The following packages have a transitive dependency on cn.hutool:hutool-json and may be impacted: - cn.hutool:hutool-bom 4.6.7 - cn.hutool:hutool-dfa 4.6.7 - cn.hutool:hutool-http 4.6.7 - cn.virens:virens-utils-common...

cn.hutool:hutool-dfa (4.5.14), cn.hutool:hutool-http (4.5.14) potentially affected by CVE-2022-45690 via cn.hutool:hutool-json (4.5.14)

cn.hutool:hutool-json MAVEN version 4.5.14 is affected by a known vulnerability. The following packages have a transitive dependency on cn.hutool:hutool-json and may be impacted: - cn.hutool:hutool-dfa 4.5.14 - cn.hutool:hutool-http 4.5.14 Source cves: CVE-2022-45690 Source advisory:...

cn.hutool:hutool-dfa (4.1.6), cn.hutool:hutool-http (4.1.6) potentially affected by CVE-2022-45690 via cn.hutool:hutool-json (4.1.6)

cn.hutool:hutool-json MAVEN version 4.1.6 is affected by a known vulnerability. The following packages have a transitive dependency on cn.hutool:hutool-json and may be impacted: - cn.hutool:hutool-dfa 4.1.6 - cn.hutool:hutool-http 4.1.6 Source cves: CVE-2022-45690 Source advisory:...

cn.com.pism.gfd:gofastdfs-spring-boot-autoconfigure (>=0.0.1, <=0.0.5), cn.com.pism.gfd:gofastdfs-spring-boot-starter (>=0.0.1, <=0.0.5) +244 more potentially affected by CVE-2022-45690 via cn.hutool:hutool-json (>=5.0.0, <=5.8.10)

cn.hutool:hutool-json MAVEN version =5.0.0, =0.0.1, =0.0.1, =1.31.0.rc, =1.31.0, =2.0.0, =5.0.0, =5.0.0, =5.0.0, =5.7.0, =2.0.2, =2.0.2, =2.0.2, =2.0.2, =2.0.2, =2.0.6 and more Source cves: CVE-2022-45690 Source advisory: OSV:GHSA-WHGH-G24C-3J5Q...

cn.hutool:hutool-bom (4.6.13), cn.hutool:hutool-dfa (4.6.13) +1 more potentially affected by CVE-2022-45690 via cn.hutool:hutool-json (4.6.13)

cn.hutool:hutool-json MAVEN version 4.6.13 is affected by a known vulnerability. The following packages have a transitive dependency on cn.hutool:hutool-json and may be impacted: - cn.hutool:hutool-bom 4.6.13 - cn.hutool:hutool-dfa 4.6.13 - cn.hutool:hutool-http 4.6.13 Source cves: CVE-2022-45690...

cn.hutool:hutool-dfa (4.0.2), cn.hutool:hutool-http (4.0.2) potentially affected by CVE-2022-45690 via cn.hutool:hutool-json (4.0.2)

cn.hutool:hutool-json MAVEN version 4.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on cn.hutool:hutool-json and may be impacted: - cn.hutool:hutool-dfa 4.0.2 - cn.hutool:hutool-http 4.0.2 Source cves: CVE-2022-45690 Source advisory:...

cn.hutool:hutool-dfa (4.0.3), cn.hutool:hutool-http (4.0.3) potentially affected by CVE-2022-45690 via cn.hutool:hutool-json (4.0.3)

cn.hutool:hutool-json MAVEN version 4.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on cn.hutool:hutool-json and may be impacted: - cn.hutool:hutool-dfa 4.0.3 - cn.hutool:hutool-http 4.0.3 Source cves: CVE-2022-45690 Source advisory:...

cn.hutool:hutool-dfa (4.0.10), cn.hutool:hutool-http (4.0.10) potentially affected by CVE-2022-45690 via cn.hutool:hutool-json (4.0.10)

cn.hutool:hutool-json MAVEN version 4.0.10 is affected by a known vulnerability. The following packages have a transitive dependency on cn.hutool:hutool-json and may be impacted: - cn.hutool:hutool-dfa 4.0.10 - cn.hutool:hutool-http 4.0.10 Source cves: CVE-2022-45690 Source advisory:...

cn.hutool:hutool-dfa (4.0.11), cn.hutool:hutool-http (4.0.11) potentially affected by CVE-2022-45690 via cn.hutool:hutool-json (4.0.11)

cn.hutool:hutool-json MAVEN version 4.0.11 is affected by a known vulnerability. The following packages have a transitive dependency on cn.hutool:hutool-json and may be impacted: - cn.hutool:hutool-dfa 4.0.11 - cn.hutool:hutool-http 4.0.11 Source cves: CVE-2022-45690 Source advisory:...

cn.hutool:hutool-dfa (4.1.1), cn.hutool:hutool-http (4.1.1) +1 more potentially affected by CVE-2022-45690 via cn.hutool:hutool-json (4.1.1)

cn.hutool:hutool-json MAVEN version 4.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on cn.hutool:hutool-json and may be impacted: - cn.hutool:hutool-dfa 4.1.1 - cn.hutool:hutool-http 4.1.1 - cn.virens:virens-util 1.2.2 Source cves: CVE-2022-45690...