RHLW-2026-1DA18FF8E343FDF8 Lightwell Security Advisory: json 20220320.0.0.rhlw-00003

Red Hat Lightwell has released org.json:json 20220320.0.0.rhlw-00003 with a backported security fix. CVE-2022-45688: A stack overflow in the XML.toJSONObject component of hutool-json v5.8.10 allows attackers to cause a Denial of Service DoS via crafted JSON or XML data. This patched artifact is a...

Security Bulletin: IBM webMethods BPM is vulnerable to a denial of service due to JSON-Java

Summary IBM webMethods BPM uses JSON-Java for reading and parsing of JSON data. Vulnerability Details CVEID:CVE-2023-5072 DESCRIPTION: Denial of Service in JSON-Java versions up to and including 20230618. A bug in the parser means that an input string of modest size can lead to indefinite amounts...

Security Bulletin: IBM webMethods BPM is vulnerable to a denial of service due to json-20190722.jar

Summary IBM webMethods BPM uses json-20190722.jar for reading and parsing of JSON data. Vulnerability Details CVEID:CVE-2023-5072 DESCRIPTION: Denial of Service in JSON-Java versions up to and including 20230618. A bug in the parser means that an input string of modest size can lead to indefinite...

EUVD-2022-7491

Malicious code in bioql PyPI...

CVE-2022-45689

hutool-json v5.8.10 was discovered to contain an out of memory error...

CVE-2022-45688

A stack overflow in the XML.toJSONObject component of hutool-json v5.8.10 allows attackers to cause a Denial of Service DoS via crafted JSON or XML data...

CVE-2022-45690

A stack overflow in the org.json.JSONTokener.nextValue::JSONTokener.java component of hutool-json v5.8.10 allows attackers to cause a Denial of Service DoS via crafted JSON or XML data...

SUSE CVE-2022-45688

A stack overflow in the XML.toJSONObject component of hutool-json v5.8.10 allows attackers to cause a Denial of Service DoS via crafted JSON or XML data...

DoS (Denial of Service) org.json:json Dependency in Jira Software Data Center and Server

This High severity org.json:json Dependency vulnerability was introduced in versions 8.20.0, 8.22.0, 9.0.0, 9.1.0, 9.2.0, 9.3.0, 9.4.0, 9.5.0, 9.6.0, 9.7.0, 9.8.0, and 9.9.0 of Jira Software Data Center and Server. This org.json:json Dependency vulnerability, with a CVSS Score of 7.5 and a CVSS...

hutool-json Vulnerability in Bitbucket Data Center and Server

This High severity Third-Party Dependency vulnerability was introduced in versions 7.17.0, 7.21.0, 8.7.0, 8.8.0, 8.9.0, 8.10.0, 8.11.0, and 8.12.0 of Bitbucket Data Center and Server. This Third-Party Dependency vulnerability, with a CVSS Score of 7.5 and a CVSS Vector of...

hutool-json JSONTokener Heap Buffer Overflow DoS

The vulnerability in the org.json.JSONTokener.nextValue::JSONTokener.java component of the file and network operations library hutool-json is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to cause service failures...

hutool-json Heap Buffer Overflow DoS

The vulnerability of the hutool-json library for file processing and network operations is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to cause service failures...

hutool-json XML.toJSONObject DoS

The vulnerability of the XML.toJSONObject component in the library for file processing and network operations in hutool-json is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to cause service failures...

cn.hutool:hutool-bom (4.6.3), cn.hutool:hutool-dfa (4.6.3) +1 more potentially affected by CVE-2023-42276 via cn.hutool:hutool-json (4.6.3)

cn.hutool:hutool-json MAVEN version 4.6.3 is affected by a known vulnerability. The following packages have a transitive dependency on cn.hutool:hutool-json and may be impacted: - cn.hutool:hutool-bom 4.6.3 - cn.hutool:hutool-dfa 4.6.3 - cn.hutool:hutool-http 4.6.3 Source cves: CVE-2023-42276...

cn.hutool:hutool-dfa (4.5.18), cn.hutool:hutool-http (4.5.18) potentially affected by CVE-2023-42278 via cn.hutool:hutool-json (4.5.18)

cn.hutool:hutool-json MAVEN version 4.5.18 is affected by a known vulnerability. The following packages have a transitive dependency on cn.hutool:hutool-json and may be impacted: - cn.hutool:hutool-dfa 4.5.18 - cn.hutool:hutool-http 4.5.18 Source cves: CVE-2023-42278 Source advisory:...

cn.hutool:hutool-all (4.6.0), cn.hutool:hutool-bom (4.6.0) +3 more potentially affected by CVE-2023-42277 via cn.hutool:hutool-json (4.6.0)

cn.hutool:hutool-json MAVEN version 4.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on cn.hutool:hutool-json and may be impacted: - cn.hutool:hutool-all 4.6.0 - cn.hutool:hutool-bom 4.6.0 - cn.hutool:hutool-dfa 4.6.0 - cn.hutool:hutool-http 4.6.0 -...

cn.hutool:hutool-bom (4.6.1), cn.hutool:hutool-dfa (4.6.1) +28 more potentially affected by CVE-2023-42276 via cn.hutool:hutool-json (4.6.1)

cn.hutool:hutool-json MAVEN version 4.6.1 is affected by a known vulnerability. The following packages have a transitive dependency on cn.hutool:hutool-json and may be impacted: - cn.hutool:hutool-bom 4.6.1 - cn.hutool:hutool-dfa 4.6.1 - cn.hutool:hutool-http 4.6.1 - cn.virens:virens-utils-common...

club.mrxiao:express-java-common (>=1.0.0, <=1.0.2), club.mrxiao:express-java-jdl (>=1.0.0, <=1.0.2) +22 more potentially affected by CVE-2023-42276 via cn.hutool:hutool-json (4.6.2)

cn.hutool:hutool-json MAVEN version 4.6.2 is affected by a known vulnerability. The following packages have a transitive dependency on cn.hutool:hutool-json and may be impacted: - club.mrxiao:express-java-common =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =2.0.3, =2.0.5, =2.0.1.b, =2.0.1.b, =2.0.1.b,...

cn.hutool:hutool-bom (4.6.11), cn.hutool:hutool-dfa (4.6.11) +1 more potentially affected by CVE-2023-42276 via cn.hutool:hutool-json (4.6.11)

cn.hutool:hutool-json MAVEN version 4.6.11 is affected by a known vulnerability. The following packages have a transitive dependency on cn.hutool:hutool-json and may be impacted: - cn.hutool:hutool-bom 4.6.11 - cn.hutool:hutool-dfa 4.6.11 - cn.hutool:hutool-http 4.6.11 Source cves: CVE-2023-42276...

cn.hutool:hutool-bom (4.6.12), cn.hutool:hutool-dfa (4.6.12) +1 more potentially affected by CVE-2023-42276 via cn.hutool:hutool-json (4.6.12)

cn.hutool:hutool-json MAVEN version 4.6.12 is affected by a known vulnerability. The following packages have a transitive dependency on cn.hutool:hutool-json and may be impacted: - cn.hutool:hutool-bom 4.6.12 - cn.hutool:hutool-dfa 4.6.12 - cn.hutool:hutool-http 4.6.12 Source cves: CVE-2023-42276...