Lucene search
+L

42 matches found

Kitploit
Kitploit
•added 2026/10/07 6:10 a.m.•20 views

json-sanitizer

json-sanitizer Имея JSON-подобное содержимое, JSON Sanitizer преобразует его в валидный JSON. Начало работы — Контакты Этот инструмент можно разместить на любом конце конвейера данных, чтобы помочь соблюдать принцип Постеля: будьте консервативны в том, что делаете, и либеральны в том, что...

6.2AI score
SaveExploits0References2
Kitploit
Kitploit
•added 2026/10/06 6:33 p.m.•20 views

OWASP__json-sanitizer_CVE-2020-13973_1-2-0

json-sanitizer JSON Sanitizer преобразует JSON-подобное содержимое в валидный JSON. Начало работы - Контакты Этот инструмент может быть подключён на любом конце конвейера данных, чтобы помочь удовлетворить принцип Постела: будьте консервативны в том, что делаете, и либеральны в том, что принимает...

6.1CVSS6.7AI score0.01114EPSS
SaveExploits1References2
Kitploit
Kitploit
•added 2026/10/02 11:00 p.m.•12 views

json-sanitizer

json-sanitizer Задан JSON-подобный контент, JSON Sanitizer преобразует его в корректный JSON. Начало работы - Контакты Этот инструмент можно подключить на любом конце конвейера обработки данных, чтобы помочь соблюсти принцип Постеля: будьте консервативны в том, что делаете, и либеральны в том, чт...

6.2AI score
SaveExploits0References2
NVD
NVD
•added 2026/08/28 4:17 p.m.•16 views

CVE-2026-37736

An issue in the JsonSanitizer.sanitize component of OWASP json-sanitizer v1.2.3 allows attackers to cause a Denial of Service DoS via a crafted input...

7.5CVSS0.00488EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/08/28 12:00 a.m.•16 views

EUVD-2026-67773

An issue in the JsonSanitizer.sanitize component of OWASP json-sanitizer v1.2.3 allows attackers to cause a Denial of Service DoS via a crafted input...

7.5CVSS5.9AI score0.00488EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/08/28 12:00 a.m.•39 views

CVE-2026-37736

An issue in the JsonSanitizer.sanitize component of OWASP json-sanitizer v1.2.3 allows attackers to cause a Denial of Service DoS via a crafted input...

0.00488EPSS
SaveExploits0References2
CVE
CVE
•added 2026/08/28 12:00 a.m.•57 views

CVE-2026-37736

The OWASP json-sanitizer version v1.2.3 is affected by a vulnerability in the JsonSanitizer.sanitize() component. An attacker can provide a crafted input to trigger a Denial of Service (DoS) . The vulnerability is characterized as an Allocation of Resources Without Limits or Throttling . No speci...

7.5CVSS5.8AI score0.00488EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/08/28 12:00 a.m.•27 views

PT-2026-83126

An issue in the JsonSanitizer.sanitize component of OWASP json-sanitizer v1.2.3 allows attackers to cause a Denial of Service DoS via a crafted input...

5.9AI score0.00488EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/28 12:00 a.m.•3 views

CVE-2026-37736: Allocation of Resources Without Limits or Throttling

An issue in the JsonSanitizer.sanitize component of OWASP json-sanitizer v1.2.3 allows attackers to cause a Denial of Service DoS via a crafted input...

7.5CVSS5.8AI score0.00488EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2026/08/28 12:00 a.m.•19 views

CVE-2026-37736

An issue in the JsonSanitizer.sanitize component of OWASP json-sanitizer v1.2.3 allows attackers to cause a Denial of Service DoS via a crafted input...

5.8AI score0.00488EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2025/11/26 12:00 a.m.•31 views

Owasp Json-sanitizer 安全漏洞

Owasp Json-sanitizer is a Java-based code library from the OWASP Foundation that generates Json format data from Json like text content. A security vulnerability exists in Owasp Json-sanitizer version 20240325.1, which stems from HtmlPolicyBuilder allowing noscript and style tags, which could lea...

8.6CVSS6AI score0.00249EPSS
SaveExploits1References2
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•18 views

EUVD-2021-1360

Malware in sbrugna...

9.8CVSS8.1AI score0.02068EPSS
SaveExploits0References5
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•22 views

EUVD-2021-1020

Malware in sbrugna...

7.5CVSS7.3AI score0.02099EPSS
SaveExploits0References5
RedhatCVE
RedhatCVE
•added 2025/05/22 7:19 p.m.•23 views

CVE-2021-23900

OWASP json-sanitizer before 1.2.2 can output invalid JSON or throw an undeclared exception for crafted input. This may lead to denial of service if the application is not prepared to handle these situations...

7.5CVSS6.8AI score0.02099EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/22 7:19 p.m.•17 views

CVE-2021-23899

OWASP json-sanitizer before 1.2.2 may emit closing SCRIPT tags and CDATA section delimiters for crafted input. This allows an attacker to inject arbitrary HTML or XML into embedding documents...

9.8CVSS6.8AI score0.02068EPSS
SaveExploits0References1
Github Security Blog
Github Security Blog
•added 2022/02/10 11:04 p.m.•93 views

Cross-site scripting in json-sanitizer

OWASP json-sanitizer before 1.2.1 allows XSS. An attacker who controls a substring of the input JSON, and controls another substring adjacent to a SCRIPT element in which the output is embedded as JavaScript, may be able to confuse the HTML parser as to where the SCRIPT element ends, and cause...

6.1CVSS1.6AI score0.01114EPSS
SaveExploits1References3Affected Software1
OSV
OSV
•added 2022/02/10 11:04 p.m.•48 views

GHSA-G8JJ-899Q-8X3J Cross-site scripting in json-sanitizer

OWASP json-sanitizer before 1.2.1 allows XSS. An attacker who controls a substring of the input JSON, and controls another substring adjacent to a SCRIPT element in which the output is embedded as JavaScript, may be able to confuse the HTML parser as to where the SCRIPT element ends, and cause...

6.1CVSS5.8AI score0.01114EPSS
SaveExploits1References2
Github Security Blog
Github Security Blog
•added 2021/06/16 5:34 p.m.•76 views

Arbitrary code injection in json-sanitizer

OWASP json-sanitizer before 1.2.2 may emit closing SCRIPT tags and CDATA section delimiters for crafted input. This allows an attacker to inject arbitrary HTML or XML into embedding documents...

9.8CVSS2.9AI score0.02068EPSS
SaveExploits0References5Affected Software1
OSV
OSV
•added 2021/06/16 5:34 p.m.•65 views

GHSA-MM8J-9X84-M9CV Arbitrary code injection in json-sanitizer

OWASP json-sanitizer before 1.2.2 may emit closing SCRIPT tags and CDATA section delimiters for crafted input. This allows an attacker to inject arbitrary HTML or XML into embedding documents...

9.8CVSS7.3AI score0.02068EPSS
SaveExploits0References4
Github Security Blog
Github Security Blog
•added 2021/05/13 10:31 p.m.•83 views

Uncaught Exception leading to Denial of Service in json-sanitizer

OWASP json-sanitizer before 1.2.2 can output invalid JSON or throw an undeclared exception for crafted input. This may lead to denial of service if the application is not prepared to handle these situations...

7.5CVSS1.2AI score0.02099EPSS
SaveExploits0References5Affected Software1
Rows per page
Query Builder