13 matches found
EUVD-2023-1723
Malicious code in bioql PyPI...
CVE-2023-34610
A flaw was found in JSON-IO. This issue may allow a malicious user to use a specially crafted object using cyclic dependencies to cause a denial of service...
Denial Of Services (DoS)
json-io is vulnerable to Denial Of Services DoS. The vulnerability exists due a lack of nesting depth checks in the JsonParser.java, which allows an attacker to cause an application crash by passing the maliciously crafted JSON string...
json-io vulnerable to stack exhaustion
An issue was discovered json-io through 4.14.0 allows attackers to cause a denial of service or other unspecified impacts via crafted object that uses cyclic dependencies...
com.adobe.ride:ride-core (>=1.0.3 <=2.0.0), com.adobe.ride:ride-fuzzer-lib (=2.0.0) +72 more potentially affected by CVE-2023-34610 via com.cedarsoftware:json-io (>=2.2.29 <=4.14.0)
com.cedarsoftware:json-io MAVEN version =2.2.29, =1.0.3, =1.0.3, =1.2.0, =1.0.0, =4.101.0, =4.101.0, =2.0.0, =0.0.1, =2.0.602, =1.4.0-60, =1.2.0-43, =1.0.0-4, =1.0.0-4, =1.1.0-94, =1.2.0-165 and more Source cves: CVE-2023-34610 Source advisory: OSV:GHSA-779H-3R69-4F5P...
GHSA-779H-3R69-4F5P json-io vulnerable to stack exhaustion
An issue was discovered json-io through 4.14.0 allows attackers to cause a denial of service or other unspecified impacts via crafted object that uses cyclic dependencies...
CVE-2023-34610
An issue was discovered json-io thru 4.14.0 allows attackers to cause a denial of service or other unspecified impacts via crafted object that uses cyclic dependencies...
CVE-2023-34610
An issue was discovered json-io thru 4.14.0 allows attackers to cause a denial of service or other unspecified impacts via crafted object that uses cyclic dependencies...
CVE-2023-34610
An issue was discovered json-io thru 4.14.0 allows attackers to cause a denial of service or other unspecified impacts via crafted object that uses cyclic dependencies...
CVE-2023-34610
CVE-2023-34610 affects json-io up to version 4.14.0. A crafted object that uses cyclic dependencies can cause a denial of service or other unspecified impacts; root cause is the vulnerability in handling cyclic object graphs. Public references show a related advisory and issue detail (e.g., GitHu...
json-io 缓冲区错误漏洞
json-io is a json, java conversion library from the individual developer John DeRegnaucourt. A security vulnerability exists in json-io version 4.14.0 and earlier, which stems from a vulnerability that allows an attacker to cause a denial of service through the use of objects with cyclic...
CVE-2023-34610
An issue was discovered json-io thru 4.14.0 allows attackers to cause a denial of service or other unspecified impacts via crafted object that uses cyclic dependencies...
PT-2023-24947 · Json-Io · Json-Io
Name of the Vulnerable Software and Affected Versions: json-io versions 4.14.0 and earlier Description: An issue was discovered that allows attackers to cause a denial of service or other unspecified impacts via a crafted object that uses cyclic dependencies. Recommendations: For json-io versions...