Denial Of Service (DoS)

johnzon-mapper is vulnerable to Denial Of Service DoS. The vulnerability exists because it does not validate JSON user input for large numbers, which allows an attacker to inject a large number which will then be parsed by BigDecimal, resulting in Denial of Service...

org.apache.johnzon:apache-johnzon (0.8-incubating), org.apache.johnzon:johnzon-jaxrs (0.8-incubating) +18 more potentially affected by CVE-2023-33008 via org.apache.johnzon:johnzon-mapper (0.8-incubating)

org.apache.johnzon:johnzon-mapper MAVEN version 0.8-incubating is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.johnzon:johnzon-mapper and may be impacted: - org.apache.johnzon:apache-johnzon 0.8-incubating - org.apache.johnzon:johnzon-jaxrs...

org.apache.batchee:batchee-cli (0.4-incubating), org.apache.batchee:batchee-jaxrs-client (0.4-incubating) +30 more potentially affected by CVE-2023-33008 via org.apache.johnzon:johnzon-mapper (0.9.5)

org.apache.johnzon:johnzon-mapper MAVEN version 0.9.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.johnzon:johnzon-mapper and may be impacted: - org.apache.batchee:batchee-cli 0.4-incubating - org.apache.batchee:batchee-jaxrs-client...

org.apache.johnzon:johnzon-jaxrs (0.7-incubating) potentially affected by CVE-2023-33008 via org.apache.johnzon:johnzon-mapper (0.7-incubating)

org.apache.johnzon:johnzon-mapper MAVEN version 0.7-incubating is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.johnzon:johnzon-mapper and may be impacted: - org.apache.johnzon:johnzon-jaxrs 0.7-incubating Source cves: CVE-2023-33008 Source...

org.apache.johnzon:apache-johnzon (0.9.2-incubating), org.apache.johnzon:johnzon-jaxrs (0.9.2-incubating) +8 more potentially affected by CVE-2023-33008 via org.apache.johnzon:johnzon-mapper (0.9.2-incubating)

org.apache.johnzon:johnzon-mapper MAVEN version 0.9.2-incubating is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.johnzon:johnzon-mapper and may be impacted: - org.apache.johnzon:apache-johnzon 0.9.2-incubating -...

org.apache.johnzon:johnzon-jaxrs (0.1-incubating) potentially affected by CVE-2023-33008 via org.apache.johnzon:johnzon-mapper (0.1-incubating)

org.apache.johnzon:johnzon-mapper MAVEN version 0.1-incubating is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.johnzon:johnzon-mapper and may be impacted: - org.apache.johnzon:johnzon-jaxrs 0.1-incubating Source cves: CVE-2023-33008 Source...

org.apache.johnzon:johnzon-jaxrs (0.2-incubating) potentially affected by CVE-2023-33008 via org.apache.johnzon:johnzon-mapper (0.2-incubating)

org.apache.johnzon:johnzon-mapper MAVEN version 0.2-incubating is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.johnzon:johnzon-mapper and may be impacted: - org.apache.johnzon:johnzon-jaxrs 0.2-incubating Source cves: CVE-2023-33008 Source...

org.apache.johnzon:johnzon-jaxrs (0.6-incubating) potentially affected by CVE-2023-33008 via org.apache.johnzon:johnzon-mapper (0.6-incubating)

org.apache.johnzon:johnzon-mapper MAVEN version 0.6-incubating is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.johnzon:johnzon-mapper and may be impacted: - org.apache.johnzon:johnzon-jaxrs 0.6-incubating Source cves: CVE-2023-33008 Source...

org.apache.johnzon:apache-johnzon (0.9.1-incubating), org.apache.johnzon:johnzon-jaxrs (0.9.1-incubating) +1 more potentially affected by CVE-2023-33008 via org.apache.johnzon:johnzon-mapper (0.9.1-incubating)

org.apache.johnzon:johnzon-mapper MAVEN version 0.9.1-incubating is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.johnzon:johnzon-mapper and may be impacted: - org.apache.johnzon:apache-johnzon 0.9.1-incubating -...

org.apache.johnzon:apache-johnzon (0.9.4), org.apache.johnzon:johnzon-jaxrs (0.9.4) +4 more potentially affected by CVE-2023-33008 via org.apache.johnzon:johnzon-mapper (0.9.4)

org.apache.johnzon:johnzon-mapper MAVEN version 0.9.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.johnzon:johnzon-mapper and may be impacted: - org.apache.johnzon:apache-johnzon 0.9.4 - org.apache.johnzon:johnzon-jaxrs 0.9.4 -...

org.apache.johnzon:apache-johnzon (0.9-incubating), org.apache.johnzon:johnzon-jaxrs (0.9-incubating) +1 more potentially affected by CVE-2023-33008 via org.apache.johnzon:johnzon-mapper (0.9-incubating)

org.apache.johnzon:johnzon-mapper MAVEN version 0.9-incubating is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.johnzon:johnzon-mapper and may be impacted: - org.apache.johnzon:apache-johnzon 0.9-incubating - org.apache.johnzon:johnzon-jaxrs...

org.apache.johnzon:johnzon-jaxrs (0.5-incubating) potentially affected by CVE-2023-33008 via org.apache.johnzon:johnzon-mapper (0.5-incubating)

org.apache.johnzon:johnzon-mapper MAVEN version 0.5-incubating is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.johnzon:johnzon-mapper and may be impacted: - org.apache.johnzon:johnzon-jaxrs 0.5-incubating Source cves: CVE-2023-33008 Source...

cloud.piranha.extension:piranha-extension-apachewebprofile (>=20.6.0, <=20.7.0), cloud.piranha:debug (>=22.3.0, <=22.10.0) +159 more potentially affected by CVE-2023-33008 via org.apache.johnzon:johnzon-mapper (>=1.0.0, <=1.2.20)

org.apache.johnzon:johnzon-mapper MAVEN version =1.0.0, =20.6.0, =22.3.0, =0.6, =0.6, =0.6, =0.6, =0.6, =0.0.1, =1.7.2.230613, =1.7.2.230622, =2.0.0.230801-beta - dev.onvoid.webrtc.demo:webrtc-java-demo-api 0.1.0 - dev.onvoid.webrtc.demo:webrtc-java-demo-javafx 0.1.0 -...

cloud.piranha.extension:piranha-extension-apachewebprofile (>=20.6.0, <=20.7.0), cloud.piranha:debug (>=22.3.0, <=22.10.0) +168 more potentially affected by CVE-2023-33008 via org.apache.johnzon:johnzon-mapper (>=0.1-incubating, <=1.2.20)

org.apache.johnzon:johnzon-mapper MAVEN version =0.1-incubating, =20.6.0, =22.3.0, =0.6, =0.6, =0.6, =0.6, =0.6, =0.0.1, =1.7.2.230613, =1.7.2.230622, =2.0.0.230801-beta - dev.onvoid.webrtc.demo:webrtc-java-demo-api 0.1.0 - dev.onvoid.webrtc.demo:webrtc-java-demo-javafx 0.1.0 -...