SUSE CVE-2023-34620

An issue was discovered hjson thru 3.0.0 allows attackers to cause a denial of service or other unspecified impacts via crafted object that uses cyclic dependencies...

GO-2026-5157 hjson stack exhaustion vulnerability in github.com/hjson/hjson-go

hjson stack exhaustion vulnerability in github.com/hjson/hjson-go...

EUVD-2023-2472

Malicious code in bioql PyPI...

EUVD-2023-1706

Malicious code in bioql PyPI...

CVE-2023-39685

An issue in hjson-java up to v3.0.0 allows attackers to cause a Denial of Service DoS via supplying a crafted JSON string...

CVE-2023-34620

An issue was discovered hjson thru 3.0.0 allows attackers to cause a denial of service or other unspecified impacts via crafted object that uses cyclic dependencies...

Security Bulletin: IBM Sterling Partner Engagement Manager is vulnerable to denial of service due to hjson-java (CVE-2023-39685)

Summary IBM Sterling Partner Engagement Manager uses hjson-java. This bulletin identifies the steps to take to address the vulnerability. Vulnerability Details CVEID:CVE-2023-39685 DESCRIPTION: Hjson hjson-java is vulnerable to a denial of service, caused by improper input validation. By sending ...

GHSA-94W5-RF69-2H6C hson-java vulnerable to denial of service

An issue in hjson-java up to v3.0.0 allows attackers to cause a Denial of Service DoS via supplying a crafted JSON string to string a StringIndexOutOfBoundsException...

org.apereo.cas:cas-management-webapp (>=5.1.0-rc3, <=5.2.0-rc1), org.apereo.cas:cas-management-webapp-support (>=5.1.0-rc4, <=5.2.0-rc1) +178 more potentially affected by CVE-2023-39685 via org.hjson:hjson (2.1.1)

org.hjson:hjson MAVEN version 2.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.hjson:hjson and may be impacted: - org.apereo.cas:cas-management-webapp =5.1.0-rc3, =5.1.0-rc4, =5.1.0-rc4, =5.1.0-rc4, =5.1.0-rc3, =5.1.0-rc3, =5.1.0-rc3,...

com.buession.cas:buession-cas-audit (>=2.0.0, <=2.3.2), com.buession.cas:buession-cas-audit-core (>=2.3.0, <=2.3.2) +623 more potentially affected by CVE-2023-39685 via org.hjson:hjson (3.0.0)

org.hjson:hjson MAVEN version 3.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.hjson:hjson and may be impacted: - com.buession.cas:buession-cas-audit =2.0.0, =2.3.0, =2.3.0, =2.3.0, =2.3.0, =2.3.0, =2.3.0, =2.3.0, =2.3.0, =2.0.0, =1.1.0, =2.3....

hson-java vulnerable to denial of service

An issue in hjson-java up to v3.0.0 allows attackers to cause a Denial of Service DoS via supplying a crafted JSON string to string a StringIndexOutOfBoundsException...

com.buession.cas:buession-cas-audit (>=2.0.0, <=2.3.2), com.buession.cas:buession-cas-audit-core (>=2.3.0, <=2.3.2) +623 more potentially affected by CVE-2023-39685 via org.hjson:hjson (3.0.0)

org.hjson:hjson MAVEN version 3.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.hjson:hjson and may be impacted: - com.buession.cas:buession-cas-audit =2.0.0, =2.3.0, =2.3.0, =2.3.0, =2.3.0, =2.3.0, =2.3.0, =2.3.0, =2.3.0, =2.0.0, =1.1.0, =2.3....

com.100shouhou.golddata:golddata-spider (>=1.1.1, <=1.1.4) potentially affected by CVE-2023-39685 via org.hjson:hjson (1.0.0)

org.hjson:hjson MAVEN version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.hjson:hjson and may be impacted: - com.100shouhou.golddata:golddata-spider =1.1.1, =1.1.4 Source cves: CVE-2023-39685 Source advisory: OSV:GHSA-94W5-RF69-2H6C...

org.apereo.cas:cas-management-webapp (5.0.0.rc1), org.apereo.cas:cas-management-webapp-support (5.0.0.rc1) +84 more potentially affected by CVE-2023-39685 via org.hjson:hjson (2.0.1)

org.hjson:hjson MAVEN version 2.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.hjson:hjson and may be impacted: - org.apereo.cas:cas-management-webapp 5.0.0.rc1 - org.apereo.cas:cas-management-webapp-support 5.0.0.rc1 -...

org.apereo.cas:cas-management-webapp (>=5.0.0.rc3, <=5.0.10), org.apereo.cas:cas-management-webapp-support (>=5.0.0.rc3, <=5.0.10) +165 more potentially affected by CVE-2023-39685 via org.hjson:hjson (2.1.0)

org.hjson:hjson MAVEN version 2.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.hjson:hjson and may be impacted: - org.apereo.cas:cas-management-webapp =5.0.0.rc3, =5.0.0.rc3, =5.0.0.rc3, =5.0.0.rc3, =5.1.0-rc1, =5.1.0-rc1, =5.0.0.rc3,...

CVE-2023-39685

An issue in hjson-java up to v3.0.0 allows attackers to cause a Denial of Service DoS via supplying a crafted JSON string...

CVE-2023-39685

An issue in hjson-java up to v3.0.0 allows attackers to cause a Denial of Service DoS via supplying a crafted JSON string...

CVE-2023-39685

An issue in hjson-java up to v3.0.0 allows attackers to cause a Denial of Service DoS via supplying a crafted JSON string...

CVE-2023-39685: Improper Control of Generation of Code

An issue in hjson-java up to v3.0.0 allows attackers to cause a Denial of Service DoS via supplying a crafted JSON string...

com.100shouhou.golddata:golddata-spider (>=1.1.1, <=1.1.4), com.buession.cas:buession-cas-audit (>=2.0.0, <=2.3.2) +704 more potentially affected by CVE-2023-39685 via org.hjson:hjson (>=1.0.0, <=3.0.0)

org.hjson:hjson MAVEN version =1.0.0, =1.1.1, =2.0.0, =2.3.0, =2.3.0, =2.3.0, =2.3.0, =2.3.0, =2.3.0, =2.3.0, =2.3.0, =2.0.0, =1.1.0, =2.3.0, =1.1.0, =2.3.0, =2.3.2 and more Source cves: CVE-2023-39685 Source advisory: MEND:CVE-2023-39685...