Lucene search
+L

39 matches found

Kitploit
Kitploit
•added 2026/09/24 9:26 a.m.•16 views

json-sanitizer

json-sanitizer Dado contenido similar a JSON, JSON Sanitizer lo convierte en JSON válido. Primeros pasos - Contacto Esto puede conectarse en cualquiera de los extremos de una tubería de datos para ayudar a satisfacer el principio de Postel: sé conservador en lo que haces, sé liberal en lo que...

5.9AI score
SaveExploits0References2
Kitploit
Kitploit
•added 2026/09/22 4:35 p.m.•18 views

OWASP__json-sanitizer_CVE-2020-13973_1-2-0

json-sanitizer Dado contenido similar a JSON, el Sanitizador de JSON lo convierte a JSON válido. Primeros pasos - Contacto Esto puede colocarse en cualquier extremo de un pipeline de datos para ayudar a cumplir el principio de Postel: sé conservador en lo que haces, sé liberal en lo que aceptas d...

6.1CVSS6.5AI score0.01119EPSS
SaveExploits1References2
Kitploit
Kitploit
•added 2026/09/18 11:00 p.m.•11 views

json-sanitizer

json-sanitizer 给定类 JSON 内容,JSON Sanitizer 会将其转换为有效的 JSON。 开始使用 - 联系我们 它可以附加在数据处理管道的任意一端,以帮助满足 Postel 原则: 对自己要保守,对别人要宽容 应用于来自他人的类 JSON 内容时,它将生成符合规范的 JSON,可满足您使用的任何解析器。 应用于发送前的输出时,它将纠正编码中的小错误,并使您的 JSON 更易于嵌入 HTML 和 XML。 动机 许多应用程序有大量代码使用临时方法生成 JSON 输出。...

6AI score
SaveExploits0References2
NVD
NVD
•added 2026/08/28 4:17 p.m.•14 views

CVE-2026-37736

An issue in the JsonSanitizer.sanitize component of OWASP json-sanitizer v1.2.3 allows attackers to cause a Denial of Service DoS via a crafted input...

7.5CVSS0.00488EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/08/28 12:00 a.m.•12 views

EUVD-2026-67773

An issue in the JsonSanitizer.sanitize component of OWASP json-sanitizer v1.2.3 allows attackers to cause a Denial of Service DoS via a crafted input...

7.5CVSS5.9AI score0.00488EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/08/28 12:00 a.m.•38 views

CVE-2026-37736

An issue in the JsonSanitizer.sanitize component of OWASP json-sanitizer v1.2.3 allows attackers to cause a Denial of Service DoS via a crafted input...

0.00488EPSS
SaveExploits0References2
CVE
CVE
•added 2026/08/28 12:00 a.m.•43 views

CVE-2026-37736

An issue in the JsonSanitizer.sanitize() component of OWASP json-sanitizer v1.2.3 allows attackers to cause a Denial of Service (DoS) via a crafted input. Details regarding specific exploit availability or remediation steps are not provided in the documents.

5.9AI score0.00488EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2026/08/28 12:00 a.m.•15 views

CVE-2026-37736

An issue in the JsonSanitizer.sanitize component of OWASP json-sanitizer v1.2.3 allows attackers to cause a Denial of Service DoS via a crafted input...

5.9AI score0.00488EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/08/28 12:00 a.m.•22 views

PT-2026-83126

An issue in the JsonSanitizer.sanitize component of OWASP json-sanitizer v1.2.3 allows attackers to cause a Denial of Service DoS via a crafted input...

5.9AI score0.00488EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/28 12:00 a.m.•0 views

CVE-2026-37736: Allocation of Resources Without Limits or Throttling

An issue in the JsonSanitizer.sanitize component of OWASP json-sanitizer v1.2.3 allows attackers to cause a Denial of Service DoS via a crafted input...

7.5CVSS5.8AI score0.00488EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2025/11/26 12:00 a.m.•26 views

Owasp Json-sanitizer 安全漏洞

Owasp Json-sanitizer is a Java-based code library from the OWASP Foundation that generates Json format data from Json like text content. A security vulnerability exists in Owasp Json-sanitizer version 20240325.1, which stems from HtmlPolicyBuilder allowing noscript and style tags, which could lea...

8.6CVSS6AI score0.00249EPSS
SaveExploits1References2
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•14 views

EUVD-2021-1360

Malware in sbrugna...

9.8CVSS9.2AI score0.02068EPSS
SaveExploits0References5
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•17 views

EUVD-2021-1020

Malware in sbrugna...

7.5CVSS7.5AI score0.02099EPSS
SaveExploits0References5
RedhatCVE
RedhatCVE
•added 2025/05/22 7:19 p.m.•21 views

CVE-2021-23900

OWASP json-sanitizer before 1.2.2 can output invalid JSON or throw an undeclared exception for crafted input. This may lead to denial of service if the application is not prepared to handle these situations...

7.5CVSS6.8AI score0.02099EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/22 7:19 p.m.•16 views

CVE-2021-23899

OWASP json-sanitizer before 1.2.2 may emit closing SCRIPT tags and CDATA section delimiters for crafted input. This allows an attacker to inject arbitrary HTML or XML into embedding documents...

9.8CVSS6.8AI score0.02068EPSS
SaveExploits0References1
Github Security Blog
Github Security Blog
•added 2022/02/10 11:04 p.m.•90 views

Cross-site scripting in json-sanitizer

OWASP json-sanitizer before 1.2.1 allows XSS. An attacker who controls a substring of the input JSON, and controls another substring adjacent to a SCRIPT element in which the output is embedded as JavaScript, may be able to confuse the HTML parser as to where the SCRIPT element ends, and cause...

6.1CVSS1.6AI score0.01119EPSS
SaveExploits1References3Affected Software1
OSV
OSV
•added 2022/02/10 11:04 p.m.•47 views

GHSA-G8JJ-899Q-8X3J Cross-site scripting in json-sanitizer

OWASP json-sanitizer before 1.2.1 allows XSS. An attacker who controls a substring of the input JSON, and controls another substring adjacent to a SCRIPT element in which the output is embedded as JavaScript, may be able to confuse the HTML parser as to where the SCRIPT element ends, and cause...

6.1CVSS5.8AI score0.01119EPSS
SaveExploits1References2
Github Security Blog
Github Security Blog
•added 2021/06/16 5:34 p.m.•73 views

Arbitrary code injection in json-sanitizer

OWASP json-sanitizer before 1.2.2 may emit closing SCRIPT tags and CDATA section delimiters for crafted input. This allows an attacker to inject arbitrary HTML or XML into embedding documents...

9.8CVSS2.9AI score0.02068EPSS
SaveExploits0References5Affected Software1
OSV
OSV
•added 2021/06/16 5:34 p.m.•64 views

GHSA-MM8J-9X84-M9CV Arbitrary code injection in json-sanitizer

OWASP json-sanitizer before 1.2.2 may emit closing SCRIPT tags and CDATA section delimiters for crafted input. This allows an attacker to inject arbitrary HTML or XML into embedding documents...

9.8CVSS7.3AI score0.02068EPSS
SaveExploits0References4
Github Security Blog
Github Security Blog
•added 2021/05/13 10:31 p.m.•81 views

Uncaught Exception leading to Denial of Service in json-sanitizer

OWASP json-sanitizer before 1.2.2 can output invalid JSON or throw an undeclared exception for crafted input. This may lead to denial of service if the application is not prepared to handle these situations...

7.5CVSS1.2AI score0.02099EPSS
SaveExploits0References5Affected Software1
Rows per page
Query Builder