Denial Of Service (DoS)

json-path is vulnerable to Denial Of Service DoS. The vulnerability is due an infinite recursion caused when a specially crafted input is passed to the Criteria.parse method which results in a stack overflow...

CVE-2023-51074

A stack overflow vulnerability was found in the Criteria.parse method in json-path. This issue occurs due to an uncontrolled recursion caused by specially crafted input, leading to a stack overflow. This vulnerability has the potential to trigger a crash, resulting in a denial of service...

GHSA-PFH2-HFMQ-PHG5 json-path Out-of-bounds Write vulnerability

json-path v2.8.0 was discovered to contain a stack overflow via the Criteria.parse method...

africa.absa:inception-test (>=1.0.0, <=1.2.0), ai.apiverse:apipulse (1.0.1) +9575 more potentially affected by CVE-2023-51074 via com.jayway.jsonpath:json-path (>=2.2.0, <=2.8.0)

com.jayway.jsonpath:json-path MAVEN version =2.2.0, =1.0.0, =0.0.2, =0.0.2, =0.0.10, =0.0.6, =1.1.0-rc1, =1.6.8, =4.1.0, =4.0.0-beta.1, =3.4.0, =3.5.4-rc.0, =2.0, =2.0, =3.0 and more Source cves: CVE-2023-51074 Source advisory: OSV:GHSA-PFH2-HFMQ-PHG5...

CVE-2023-51074

json-path v2.8.0 was discovered to contain a stack overflow via the Criteria.parse method...

CVE-2023-51074

json-path v2.8.0 was discovered to contain a stack overflow via the Criteria.parse method...

CVE-2023-51074

json-path v2.8.0 was discovered to contain a stack overflow via the Criteria.parse method...

UBUNTU-CVE-2023-51074

json-path v2.8.0 was discovered to contain a stack overflow via the Criteria.parse method...

Stack overflow

json-path v2.8.0 was discovered to contain a stack overflow via the Criteria.parse method...

CVE-2023-51074

json-path v2.8.0 was discovered to contain a stack overflow via the Criteria.parse method...

Jayway JsonPath Security Vulnerability

Jayway JsonPath is json-path open source a Java DSL for reading Json documents. A security vulnerability exists in Jayway JsonPath version v2.8.0, which stems from a stack overflow vulnerability in the Criteria.parse method...

CVE-2023-51074

CVE-2023-51074 affects json-path v2.8.0 and involves a stack-based buffer overflow in Criteria.parse(). IBM’s Security Bulletin for IBM Rational Performance Tester lists affected products as Rational Performance Tester 9.2, 9.5, 10.0, 10.1, 10.2, and 11.0 (up to 11.0.6). A remediation is to upgra...

CVE-2023-51074

json-path v2.8.0 was discovered to contain a stack overflow via the Criteria.parse method...

CVE-2023-51074: Undefined Security Weakness

json-path v2.8.0 was discovered to contain a stack overflow via the Criteria.parse method...

CVE-2023-51074

json-path v2.8.0 was discovered to contain a stack overflow via the Criteria.parse method...

PT-2023-9053

Name of the Vulnerable Software and Affected Versions json-path version 2.8.0 Description The issue is related to a stack overflow in the Criteria.parse method of the json-path library. This can potentially allow a remote attacker to cause a denial of service. Recommendations For json-path versio...

GHSA-5X5Q-8CGM-2HJQ Karate has vulnerable dependency on json-smart package (CVE-2023-1370)

Summary The CVE How to fix it Very simple, just upgrade json-path package to 2.8.0 from 2.7.0 inside karate-core pom.xml ;...

Karate has vulnerable dependency on json-smart package (CVE-2023-1370)

Summary The CVE How to fix it Very simple, just upgrade json-path package to 2.8.0 from 2.7.0 inside karate-core pom.xml ;...

com.github.rest-driver:rest-client-driver (>=1.1.19, <=1.1.20), com.github.rest-driver:rest-driver-shared (>=1.1.19, <=1.1.20) +6 more potentially affected by CVE-2023-1370 via net.minidev:json-smart (1.0.6.3)

net.minidev:json-smart MAVEN version 1.0.6.3 is affected by a known vulnerability. The following packages have a transitive dependency on net.minidev:json-smart and may be impacted: - com.github.rest-driver:rest-client-driver =1.1.19, =1.1.19, =1.1.5, =0.5.4, =0.5.4, =0.1.2, =0.3, =0.1, =0.54...

[SECURITY] Fedora 35 Update: golang-github-pelletier-toml-1.9.4-2.fc35

Go-toml provides the following features for using data parsed from TOML documents: - Load TOML documents from files and string data - Easily navigate TOML structure using Tree - Mashaling and unmarshaling to and from data structures - Line & column position data for all parsed elements - Query...