CVE-2023-34611

An issue was discovered mjson thru 1.4.1 allows attackers to cause a denial of service or other unspecified impacts via crafted object that uses cyclic dependencies...

CVE-2023-34613

An issue was discovered sojo thru 1.1.1 allows attackers to cause a denial of service or other unspecified impacts via crafted object that uses cyclic dependencies...

CVE-2023-35110

An issue was discovered jjson thru 0.1.7 allows attackers to cause a denial of service or other unspecified impacts via crafted object that uses cyclic dependencies...

Genson 缓冲区错误漏洞

Genson is owlike open source a complete json, java conversion library . Genson 1.6 and earlier versions of a security vulnerability , the vulnerability stems from allowing an attacker to cause a denial of service through the use of circular dependencies on the object...

CVE-2023-34612

An issue was discovered ph-json thru 9.5.5 allows attackers to cause a denial of service or other unspecified impacts via crafted object that uses cyclic dependencies...

PT-2023-24946 · Flexjson · Flexjson

Name of the Vulnerable Software and Affected Versions: flexjson versions prior to 3.4 Description: An issue was discovered in flexjson that allows attackers to cause a denial of service or other unspecified impacts via a crafted object that uses cyclic dependencies. Recommendations: For versions...

CVE-2023-34620

An issue was discovered hjson thru 3.0.0 allows attackers to cause a denial of service or other unspecified impacts via crafted object that uses cyclic dependencies...

PT-2023-24954 · Genson · Genson

Name of the Vulnerable Software and Affected Versions: genson versions 1.6 and earlier Description: An issue allows attackers to cause a denial of service or other unspecified impacts via crafted objects that use cyclic dependencies or have deeply nested structures. Recommendations: For genson...

CVE-2023-35116

jackson-databind through 2.15.2 allows attackers to cause a denial of service or other unspecified impact via a crafted object that uses cyclic dependencies. NOTE: the vendor's perspective is that this is not a valid vulnerability report, because the steps of constructing a cyclic data structure...

CVE-2023-34610

CVE-2023-34610 affects json-io up to version 4.14.0. A crafted object that uses cyclic dependencies can cause a denial of service or other unspecified impacts; root cause is the vulnerability in handling cyclic object graphs. Public references show a related advisory and issue detail (e.g., GitHu...

jsonij vulnerable to stack exhaustion

An issue was discovered jmarsden/jsonij through 0.5.2 allows attackers to cause a denial of service or other unspecified impacts via crafted object that uses cyclic dependencies...

CVE-2023-34617

CVE-2023-34617 affects the Python/Java library genson up to version 1.6 and earlier. An attacker can trigger a denial of service (DoS) by providing crafted objects that use cyclic dependencies (also variants with deeply nested structures), per multiple sources. CVSSv3.1 base score is 7.5 (HIGH): ...

PT-2023-32980 · Cuid +1 · Cuid +2

Name of the Vulnerable Software and Affected Versions: @keystone-6/ versions affected versions not specified Description: The cuid package is deprecated and marked as insecure by its author due to security concerns. It is recommended to use @paralleldrive/cuid2 instead. The issue affects...

PT-2023-4253 · Unknown +2 · Htmlcleaner +2

Name of the Vulnerable Software and Affected Versions: HtmlCleaner versions 2.28 and earlier Description: The issue allows attackers to cause a denial of service or other unspecified impacts via a crafted object that uses cyclic dependencies. It is related to a buffer overflow in memory, which ca...

CVE-2023-34223

In JetBrains TeamCity before 2023.05 parameters of the "password" type from build dependencies could be logged in some cases...

CVE-2023-34223

In JetBrains TeamCity before 2023.05 parameters of the "password" type from build dependencies could be logged in some cases...

CVE-2023-34223

In JetBrains TeamCity before 2023.05 parameters of the "password" type from build dependencies could be logged in some cases...

JetBrains TeamCity 日志信息泄露漏洞

JetBrains TeamCity is a set of distributed build management and continuous integration tools from the Czech company JetBrains. The tool provides features such as continuous unit testing, code quality analysis and build issue analysis reports. A logging information disclosure vulnerability exists ...

PT-2023-24748 · Jetbrains · Teamcity

Name of the Vulnerable Software and Affected Versions: JetBrains TeamCity versions prior to 2023.05 Description: The issue concerns the logging of parameters of the password type from build dependencies in certain cases. Recommendations: For versions prior to 2023.05, update to version 2023.05 or...

[SECURITY] Fedora 37 Update: python-starlette-0.20.4-3.fc37

Starlette is a lightweight ASGI framework/toolkit, which is ideal for building async web services in Python. It is production-ready, and gives you the following: =EF=BF=BD=EF=BF=BD=EF=BF=BD A lightweight, low-complexity HTTP web framewor k. =EF=BF=BD=EF=BF=BD=EF=BF=BD WebSocket support...