Denial Of Service (DoS)

net.minidev, json-smart is vulnerable to Denial Of Service DoS. The vulnerability exists because there is no nested depth checks for deeply nested JSON arrays or objects, which allows an attacker to crash the application via a malicious array with deeply nested elements...

UBUNTU-CVE-2023-1370

Json-smart is a performance focused, JSON processor lib. When reaching a ‘‘ or ‘‘ character in the JSON input, the code parses an array or an object respectively. It was discovered that the code does not have any limit to the nesting of such arrays or objects. Since the parsing of nested arrays a...

Yii Framework Cross-Site Scripting Vulnerability

Yii Framework is a component-based , high-performance PHP framework for developing large-scale Web applications . A cross-site scripting vulnerability exists in versions of Yii Framework prior to 2.0.4 that allows remote attackers to inject arbitrary web script or HTML via vector-related JSON...