19 matches found
ROOT-APP-MAVEN-CVE-2023-1370 CVE-2023-1370 in net.minidev:json-smart - Patched by Root
Root has patched CVE-2023-1370 in the net.minidev:json-smart package for Root:Maven. Multiple fixed versions available...
DoS (Denial of Service) net.minidev:json-smart Dependency in Crucible Data Center and Server
This High severity net.minidev:json-smart Dependency vulnerability was introduced in version 4.9.0 of Crucible Data Center and Server. This net.minidev:json-smart Dependency vulnerability, with a CVSS Score of 7.5 and a CVSS Vector of CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H allows an...
DoS (Denial of Service) net.minidev:json-smart Dependency in Bamboo Data Center and Server
This High severity net.minidev:json-smart Dependency vulnerability was introduced in versions 9.6.0, 10.0.0-rc5, 10.1.0, and 10.2.0 of Bamboo Data Center and Server. This net.minidev:json-smart Dependency vulnerability, with a CVSS Score of 7.5 and a CVSS Vector of...
ai.ancf.lmos:arc-runner (>=0.1.1, <=0.120.0), ai.bizone:json-transform (>=1.0.0, <=1.16.0) +5506 more potentially affected by CVE-2024-57699 via net.minidev:json-smart (>=2.5.0, <=2.5.1)
net.minidev:json-smart MAVEN version =2.5.0, =0.1.1, =1.0.0, =0.6.0, =0.5.0, =0.7.0, =3.10.0.5, =1.11.4, =1.12.0, =0.5.0, =0.1.0, =1.5.3.release, =1.5.4.release, =1.5.4.release, =1.5.8.release and more Source cves: CVE-2024-57699 Source advisory: OSV:GHSA-PQ2G-WX69-C263...
ai.ancf.lmos:arc-runner (>=0.1.1, <=0.120.0), ai.bizone:json-transform (>=1.0.0, <=1.16.0) +5506 more potentially affected by CVE-2024-57699 via net.minidev:json-smart (>=2.5.0, <=2.5.1)
net.minidev:json-smart MAVEN version =2.5.0, =0.1.1, =1.0.0, =0.6.0, =0.5.0, =0.7.0, =3.10.0.5, =1.11.4, =1.12.0, =0.5.0, =0.1.0, =1.5.3.release, =1.5.4.release, =1.5.4.release, =1.5.8.release and more Source cves: CVE-2024-57699 Source advisory: GHSA-PQ2G-WX69-C263...
ai.tripl:arc-jupyter_2.11 (>=0.0.13, <=0.0.14), ai.tripl:arc_2.11 (>=1.13.3, <=1.15.0) +722 more potentially affected by CVE-2023-1370 via net.minidev:json-smart (1.3.1)
net.minidev:json-smart MAVEN version 1.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on net.minidev:json-smart and may be impacted: - ai.tripl:arc-jupyter2.11 =0.0.13, =1.13.3, =5.1.15-beta2, =5.1.17.50 - com.aliyun.hbase:alihbase-assembly 2.0.2 -...
org.wso2.samples.is:photo-edit (>=4.3.4, <=4.4.0), org.wso2.samples.is:photo-view (>=4.3.4, <=4.4.0) +1 more potentially affected by CVE-2023-1370 via net.minidev:json-smart (1.3)
net.minidev:json-smart MAVEN version 1.3 is affected by a known vulnerability. The following packages have a transitive dependency on net.minidev:json-smart and may be impacted: - org.wso2.samples.is:photo-edit =4.3.4, =4.3.4, =4.3.4, =4.4.0 Source cves: CVE-2023-1370 Source advisory:...
de.samply:auth-dto (5.2.0), de.samply:common-mdrvalidator (3.1.0) +96 more potentially affected by CVE-2023-1370 via net.minidev:json-smart (1.3.3)
net.minidev:json-smart MAVEN version 1.3.3 is affected by a known vulnerability. The following packages have a transitive dependency on net.minidev:json-smart and may be impacted: - de.samply:auth-dto 5.2.0 - de.samply:common-mdrvalidator 3.1.0 - de.taimos:dvalin-jaxrs-jwtauth 1.32 -...
africa.absa:inception-test (>=1.0.0, <=1.2.0), ai.catboost:catboost-spark_3.1_2.12 (>=1.0.1, <=1.2.8) +13282 more potentially affected by CVE-2023-1370 via net.minidev:json-smart (>=2.0-rc2, <=2.4.8)
net.minidev:json-smart MAVEN version =2.0-rc2, =1.0.0, =1.0.1, =1.0.6, =1.0.6, =1.1, =1.1.1, =1.2, =1.2, =1.2.3, =1.2.3, =chaining-0.0.46-dev, =chaining-0.0.46-dev, =def544ccef5f753238ecc4adfc2eaa7d2fc36d53-0.0.91, =chaining-0.0.46-dev, =0.0.115 and more Source cves: CVE-2023-1370 Source advisory...
africa.absa:inception-test (>=1.0.0, <=1.2.0), ai.catboost:catboost-spark_3.1_2.12 (>=1.0.1, <=1.2.8) +13282 more potentially affected by CVE-2023-1370 via net.minidev:json-smart (>=2.0-rc2, <=2.4.8)
net.minidev:json-smart MAVEN version =2.0-rc2, =1.0.0, =1.0.1, =1.0.6, =1.0.6, =1.1, =1.1.1, =1.2, =1.2, =1.2.3, =1.2.3, =chaining-0.0.46-dev, =chaining-0.0.46-dev, =def544ccef5f753238ecc4adfc2eaa7d2fc36d53-0.0.91, =chaining-0.0.46-dev, =0.0.115 and more Source cves: CVE-2023-1370 Source advisory...
ai.tock:bot-test (>=20.9.3, <=21.9.2), ai.tock:bot-test-base (>=20.9.3, <=21.9.2) +631 more potentially affected by CVE-2023-1370 via net.minidev:json-smart (1.1.1)
net.minidev:json-smart MAVEN version 1.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on net.minidev:json-smart and may be impacted: - ai.tock:bot-test =20.9.3, =20.9.3, =20.9.3, =20.9.3, =20.9.3, =20.9.3, =20.9.3, =20.9.3, =20.9.3, =20.9.3, =20.9.3,...
africa.absa:inception-test (>=1.0.0, <=1.2.0), ai.catboost:catboost-spark_3.1_2.12 (>=1.0.1, <=1.2.8) +14000 more potentially affected by CVE-2023-1370 via net.minidev:json-smart (>=1.0.6.3, <=2.4.8)
net.minidev:json-smart MAVEN version =1.0.6.3, =1.0.0, =1.0.1, =1.0.6, =1.0.6, =1.1, =1.1.1, =1.2, =1.2, =1.2.3, =1.2.3, =chaining-0.0.46-dev, =chaining-0.0.46-dev, =def544ccef5f753238ecc4adfc2eaa7d2fc36d53-0.0.91, =chaining-0.0.46-dev, =0.0.115 and more Source cves: CVE-2023-1370 Source advisory...
ai.tripl:arc-jupyter_2.11 (>=0.0.13, <=0.0.14), ai.tripl:arc_2.11 (>=1.13.3, <=1.15.0) +731 more potentially affected by CVE-2021-31684 via net.minidev:json-smart (>=1.3, <=1.3.2)
net.minidev:json-smart MAVEN version =1.3, =0.0.13, =1.13.3, =5.1.15-beta2, =5.1.17.50 - com.aliyun.hbase:alihbase-assembly 2.0.2 - com.aliyun.hbase:alihbase-endpoint 2.0.2 - com.aliyun.hbase:alihbase-examples 2.0.2 - com.aliyun.hbase:alihbase-external-blockcache 2.0.2 -...
ai.catboost:catboost-spark_3.2_2.12 (>=1.0.6, <=1.2.10), ai.catboost:catboost-spark_3.2_2.13 (>=1.0.6, <=1.2.10) +607 more potentially affected by CVE-2021-31684 via net.minidev:json-smart (>=2.4.1, <=2.4.2)
net.minidev:json-smart MAVEN version =2.4.1, =1.0.6, =1.0.6, =0.13.0, =0.2.7, =0.2.7, =0.6.1.2, =1.0.0, =0.2.2, =1.0.0, =1.0.0, =0.2.2, =0.8.0, =0.8.0, =0.2.1, =0.3.0, =3.16.0 and more Source cves: CVE-2021-31684 Source advisory: OSV:GHSA-FG2V-W576-W4V3...
ai.tripl:arc-jupyter_2.11 (>=0.0.13, <=0.0.14), ai.tripl:arc_2.11 (>=1.13.3, <=1.15.0) +731 more potentially affected by CVE-2021-31684 via net.minidev:json-smart (>=1.3, <=1.3.2)
net.minidev:json-smart MAVEN version =1.3, =0.0.13, =1.13.3, =5.1.15-beta2, =5.1.17.50 - com.aliyun.hbase:alihbase-assembly 2.0.2 - com.aliyun.hbase:alihbase-endpoint 2.0.2 - com.aliyun.hbase:alihbase-examples 2.0.2 - com.aliyun.hbase:alihbase-external-blockcache 2.0.2 -...
ai.catboost:catboost-spark_3.1_2.12 (>=1.0.1, <=1.2.8), ai.chronon:aggregator_2.12 (>=chaining-0.0.46-dev, <=0.0.115) +9384 more potentially affected by CVE-2021-27568 via net.minidev:json-smart (>=2.0, <=2.3)
net.minidev:json-smart MAVEN version =2.0, =1.0.1, =chaining-0.0.46-dev, =chaining-0.0.46-dev, =def544ccef5f753238ecc4adfc2eaa7d2fc36d53-0.0.91, =chaining-0.0.46-dev, =def544ccef5f753238ecc4adfc2eaa7d2fc36d53-0.0.91, =thread-pool-0.0.24-dev, =0.0.6, =0.0.2, =3.22.0.1, =3.22.0.1, =3.22.0.1, =2.1.4...
ai.tock:bot-test (>=20.9.3, <=21.9.2), ai.tock:bot-test-base (>=20.9.3, <=21.9.2) +1435 more potentially affected by CVE-2021-27568 via net.minidev:json-smart (>=1.0.6.3, <=1.3.1)
net.minidev:json-smart MAVEN version =1.0.6.3, =20.9.3, =20.9.3, =20.9.3, =20.9.3, =20.9.3, =20.9.3, =20.9.3, =20.9.3, =20.9.3, =20.9.3, =20.9.3, =20.9.3, =0.0.13, =1.13.3, =1.15.0 - bio.ferlab:datalake-spark302.12 0.2.39 and more Source cves: CVE-2021-27568 Source advisory: GHSA-V528-7HRM-FRQP...
ai.catboost:catboost-spark_3.2_2.12 (>=1.0.6, <=1.2.10), ai.catboost:catboost-spark_3.2_2.13 (>=1.0.6, <=1.2.10) +607 more potentially affected by CVE-2021-31684 via net.minidev:json-smart (>=2.4.1, <=2.4.2)
net.minidev:json-smart MAVEN version =2.4.1, =1.0.6, =1.0.6, =0.13.0, =0.2.7, =0.2.7, =0.6.1.2, =1.0.0, =0.2.2, =1.0.0, =1.0.0, =0.2.2, =0.8.0, =0.8.0, =0.2.1, =0.3.0, =3.16.0 and more Source cves: CVE-2021-31684 Source advisory: MEND:CVE-2021-31684...
ai.catboost:catboost-spark_3.1_2.12 (>=1.0.1, <=1.2.8), ai.chronon:aggregator_2.12 (>=chaining-0.0.46-dev, <=0.0.115) +9384 more potentially affected by CVE-2021-27568 via net.minidev:json-smart (>=2.0, <=2.3)
net.minidev:json-smart MAVEN version =2.0, =1.0.1, =chaining-0.0.46-dev, =chaining-0.0.46-dev, =def544ccef5f753238ecc4adfc2eaa7d2fc36d53-0.0.91, =chaining-0.0.46-dev, =def544ccef5f753238ecc4adfc2eaa7d2fc36d53-0.0.91, =thread-pool-0.0.24-dev, =0.0.6, =0.0.2, =3.22.0.1, =3.22.0.1, =3.22.0.1, =2.1.4...