RHLW-2026-1DA18FF8E343FDF8 Lightwell Security Advisory: json 20220320.0.0.rhlw-00003

Red Hat Lightwell has released org.json:json 20220320.0.0.rhlw-00003 with a backported security fix. CVE-2022-45688: A stack overflow in the XML.toJSONObject component of hutool-json v5.8.10 allows attackers to cause a Denial of Service DoS via crafted JSON or XML data. This patched artifact is a...

Security Bulletin: IBM webMethods BPM is vulnerable to a denial of service due to JSON-Java

Summary IBM webMethods BPM uses JSON-Java for reading and parsing of JSON data. Vulnerability Details CVEID:CVE-2023-5072 DESCRIPTION: Denial of Service in JSON-Java versions up to and including 20230618. A bug in the parser means that an input string of modest size can lead to indefinite amounts...

Security Bulletin: IBM webMethods BPM is vulnerable to a denial of service due to json-20190722.jar

Summary IBM webMethods BPM uses json-20190722.jar for reading and parsing of JSON data. Vulnerability Details CVEID:CVE-2023-5072 DESCRIPTION: Denial of Service in JSON-Java versions up to and including 20230618. A bug in the parser means that an input string of modest size can lead to indefinite...

EUVD-2022-7491

Malicious code in bioql PyPI...

CVE-2022-45689

hutool-json v5.8.10 was discovered to contain an out of memory error...

CVE-2022-45688

A stack overflow in the XML.toJSONObject component of hutool-json v5.8.10 allows attackers to cause a Denial of Service DoS via crafted JSON or XML data...

CVE-2022-45690

A stack overflow in the org.json.JSONTokener.nextValue::JSONTokener.java component of hutool-json v5.8.10 allows attackers to cause a Denial of Service DoS via crafted JSON or XML data...

SUSE CVE-2022-45688

A stack overflow in the XML.toJSONObject component of hutool-json v5.8.10 allows attackers to cause a Denial of Service DoS via crafted JSON or XML data...

DoS (Denial of Service) org.json:json Dependency in Jira Software Data Center and Server

This High severity org.json:json Dependency vulnerability was introduced in versions 8.20.0, 8.22.0, 9.0.0, 9.1.0, 9.2.0, 9.3.0, 9.4.0, 9.5.0, 9.6.0, 9.7.0, 9.8.0, and 9.9.0 of Jira Software Data Center and Server. This org.json:json Dependency vulnerability, with a CVSS Score of 7.5 and a CVSS...

hutool-json Vulnerability in Bitbucket Data Center and Server

This High severity Third-Party Dependency vulnerability was introduced in versions 7.17.0, 7.21.0, 8.7.0, 8.8.0, 8.9.0, 8.10.0, 8.11.0, and 8.12.0 of Bitbucket Data Center and Server. This Third-Party Dependency vulnerability, with a CVSS Score of 7.5 and a CVSS Vector of...

hutool-json JSONTokener Heap Buffer Overflow DoS

The vulnerability in the org.json.JSONTokener.nextValue::JSONTokener.java component of the file and network operations library hutool-json is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to cause service failures...

hutool-json Heap Buffer Overflow DoS

The vulnerability of the hutool-json library for file processing and network operations is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to cause service failures...

hutool-json XML.toJSONObject DoS

The vulnerability of the XML.toJSONObject component in the library for file processing and network operations in hutool-json is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to cause service failures...

cn.hutool:hutool-dfa (4.1.13), cn.hutool:hutool-http (4.1.13) potentially affected by CVE-2023-42278 via cn.hutool:hutool-json (4.1.13)

cn.hutool:hutool-json MAVEN version 4.1.13 is affected by a known vulnerability. The following packages have a transitive dependency on cn.hutool:hutool-json and may be impacted: - cn.hutool:hutool-dfa 4.1.13 - cn.hutool:hutool-http 4.1.13 Source cves: CVE-2023-42278 Source advisory:...

cn.hutool:hutool-dfa (4.0.2), cn.hutool:hutool-http (4.0.2) potentially affected by CVE-2023-42278 via cn.hutool:hutool-json (4.0.2)

cn.hutool:hutool-json MAVEN version 4.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on cn.hutool:hutool-json and may be impacted: - cn.hutool:hutool-dfa 4.0.2 - cn.hutool:hutool-http 4.0.2 Source cves: CVE-2023-42278 Source advisory:...

cn.hutool:hutool-dfa (4.1.11), cn.hutool:hutool-http (4.1.11) potentially affected by CVE-2023-42278 via cn.hutool:hutool-json (4.1.11)

cn.hutool:hutool-json MAVEN version 4.1.11 is affected by a known vulnerability. The following packages have a transitive dependency on cn.hutool:hutool-json and may be impacted: - cn.hutool:hutool-dfa 4.1.11 - cn.hutool:hutool-http 4.1.11 Source cves: CVE-2023-42278 Source advisory:...

cn.hutool:hutool-dfa (4.3.2), cn.hutool:hutool-http (4.3.2) potentially affected by CVE-2023-42278 via cn.hutool:hutool-json (4.3.2)

cn.hutool:hutool-json MAVEN version 4.3.2 is affected by a known vulnerability. The following packages have a transitive dependency on cn.hutool:hutool-json and may be impacted: - cn.hutool:hutool-dfa 4.3.2 - cn.hutool:hutool-http 4.3.2 Source cves: CVE-2023-42278 Source advisory:...

cn.hutool:hutool-dfa (4.1.2), cn.hutool:hutool-http (4.1.2) potentially affected by CVE-2023-42278 via cn.hutool:hutool-json (4.1.2)

cn.hutool:hutool-json MAVEN version 4.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on cn.hutool:hutool-json and may be impacted: - cn.hutool:hutool-dfa 4.1.2 - cn.hutool:hutool-http 4.1.2 Source cves: CVE-2023-42278 Source advisory:...

cn.hutool:hutool-bom (4.6.4), cn.hutool:hutool-dfa (4.6.4) +1 more potentially affected by CVE-2023-42278 via cn.hutool:hutool-json (4.6.4)

cn.hutool:hutool-json MAVEN version 4.6.4 is affected by a known vulnerability. The following packages have a transitive dependency on cn.hutool:hutool-json and may be impacted: - cn.hutool:hutool-bom 4.6.4 - cn.hutool:hutool-dfa 4.6.4 - cn.hutool:hutool-http 4.6.4 Source cves: CVE-2023-42278...

cn.hutool:hutool-dfa (4.5.7), cn.hutool:hutool-http (4.5.7) potentially affected by CVE-2023-42278 via cn.hutool:hutool-json (4.5.7)

cn.hutool:hutool-json MAVEN version 4.5.7 is affected by a known vulnerability. The following packages have a transitive dependency on cn.hutool:hutool-json and may be impacted: - cn.hutool:hutool-dfa 4.5.7 - cn.hutool:hutool-http 4.5.7 Source cves: CVE-2023-42278 Source advisory:...