36 matches found
json-sanitizer
json-sanitizer بما أن المحتوى يشبه JSON، فإن أداة تعقيم JSON تحوّله إلى JSON صالح. بدء الاستخدام - جهة الاتصال يمكن ربط هذه الأداة بأي من طرفي خط أنابيب البيانات للمساعدة في تحقيق مبدأ بوستل: كن متحفظًا في ما تفعله، كن متسامحًا في ما تقبله من الآخرين عند تطبيقها على محتوى يشبه JSON من الآخرين،...
json-sanitizer
json-sanitizer بالنظر إلى محتوى شبيه بـ JSON، يحوّله JSON Sanitizer إلى JSON صالح. البدء - التواصل يمكن ربط هذه المكتبة بأي من طرفي خط معالجة البيانات للمساعدة في تحقيق مبدأ Postel: كن متحفظًا فيما تفعله، وكن متسامحًا فيما تقبله من الآخرين عند تطبيقها على محتوى شبيه بـ JSON قادم من الآخرين، ستنتج...
OWASP__json-sanitizer_CVE-2020-13973_1-2-0
json-sanitizer بما أنّ المحتوى شبيه بـ JSON، فإن مُنقّي JSON يحوّله إلى JSON صالح. البدء - اتصل بنا يمكن إرفاق هذه المكتبة في أيّ من طرفي خط أنابيب البيانات للمساعدة في تحقيق مبدأ بوستل: كن محافظًا فيما تفعله، وكن متسامحًا فيما تقبله من الآخرين عند تطبيقه على محتوى شبيه بـ JSON من الآخرين، سينتج...
CVE-2026-37736
An issue in the JsonSanitizer.sanitize component of OWASP json-sanitizer v1.2.3 allows attackers to cause a Denial of Service DoS via a crafted input...
EUVD-2026-67773
An issue in the JsonSanitizer.sanitize component of OWASP json-sanitizer v1.2.3 allows attackers to cause a Denial of Service DoS via a crafted input...
CVE-2026-37736
An issue in the JsonSanitizer.sanitize component of OWASP json-sanitizer v1.2.3 allows attackers to cause a Denial of Service DoS via a crafted input...
CVE-2026-37736
An issue in the JsonSanitizer.sanitize() component of OWASP json-sanitizer v1.2.3 allows attackers to cause a Denial of Service (DoS) via a crafted input. The vulnerability is rated CVSS 3.1: 7.5 (HIGH) with a vector of AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H, meaning it is network-exploitable with n...
Owasp Json-sanitizer 安全漏洞
Owasp Json-sanitizer is a Java-based code library from the OWASP Foundation that generates Json format data from Json like text content. A security vulnerability exists in Owasp Json-sanitizer version 20240325.1, which stems from HtmlPolicyBuilder allowing noscript and style tags, which could lea...
EUVD-2021-1360
Malware in sbrugna...
EUVD-2021-1020
Malware in sbrugna...
CVE-2021-23900
OWASP json-sanitizer before 1.2.2 can output invalid JSON or throw an undeclared exception for crafted input. This may lead to denial of service if the application is not prepared to handle these situations...
CVE-2021-23899
OWASP json-sanitizer before 1.2.2 may emit closing SCRIPT tags and CDATA section delimiters for crafted input. This allows an attacker to inject arbitrary HTML or XML into embedding documents...
Cross-site scripting in json-sanitizer
OWASP json-sanitizer before 1.2.1 allows XSS. An attacker who controls a substring of the input JSON, and controls another substring adjacent to a SCRIPT element in which the output is embedded as JavaScript, may be able to confuse the HTML parser as to where the SCRIPT element ends, and cause...
GHSA-G8JJ-899Q-8X3J Cross-site scripting in json-sanitizer
OWASP json-sanitizer before 1.2.1 allows XSS. An attacker who controls a substring of the input JSON, and controls another substring adjacent to a SCRIPT element in which the output is embedded as JavaScript, may be able to confuse the HTML parser as to where the SCRIPT element ends, and cause...
Arbitrary code injection in json-sanitizer
OWASP json-sanitizer before 1.2.2 may emit closing SCRIPT tags and CDATA section delimiters for crafted input. This allows an attacker to inject arbitrary HTML or XML into embedding documents...
GHSA-MM8J-9X84-M9CV Arbitrary code injection in json-sanitizer
OWASP json-sanitizer before 1.2.2 may emit closing SCRIPT tags and CDATA section delimiters for crafted input. This allows an attacker to inject arbitrary HTML or XML into embedding documents...
Uncaught Exception leading to Denial of Service in json-sanitizer
OWASP json-sanitizer before 1.2.2 can output invalid JSON or throw an undeclared exception for crafted input. This may lead to denial of service if the application is not prepared to handle these situations...
Arbitrary Code Injection
json-sanitizer is vulnerable to arbtirary code injection. An attacker could potentially inject arbitrary HTML and XML into embedding documents as closing SCRIPT tags and CDATA section delimiters may be emitted for certain input...
Denial Of Service (DoS)
json-sanitizer is vulnerable to denial of service. The vulnerability exists as certain invalid JSON characters are not sanitized, allowing an attacker to cause an undeclared exception and crash the application via a malicious string input...
Owasp Json-sanitizer Input Validation Error Vulnerability
Owasp Json-sanitizer is the Owasp Foundation of a Java-based Json can be based on the text content similar to the Json code library to generate data in Json format . An input validation error vulnerability exists in OWASP JSON -sanitizer prior to version 1.2.2, which stems from the fact that a...