EUVD-2018-0748

Malware in sbrugna...

com.typesafe.akka:akka-http-experimental_2.11 (2.4.2-rc3), com.typesafe.akka:akka-http-jackson-experimental_2.11 (2.4.2-rc3) +9 more potentially affected by CVE-2023-44487 via com.typesafe.akka:akka-http-core_2.11 (2.4.2-rc3)

com.typesafe.akka:akka-http-core2.11 MAVEN version 2.4.2-rc3 is affected by a known vulnerability. The following packages have a transitive dependency on com.typesafe.akka:akka-http-core2.11 and may be impacted: - com.typesafe.akka:akka-http-experimental2.11 2.4.2-rc3 -...

Denial Of Service (DoS)

spray-json is vulnerable to denial of service. The vulnerability exists due to the uncontrolled recursion used in the JsonParser in the parseJsValue function of JsonParser.scala, allowing an attacker to crash the application by providing a deeply nested JSON object...

Uncontrolled Resource Consumption in Spray JSON

Recursive decent parsers are susceptible too StackOverflowExceptions on too deeply nested structures as currently "open" parsing state is kept on the stack...

net.virtual-void:json-lenses_2.9.3 (0.5.4) potentially affected by CVE-2018-18855 via io.spray:spray-json_2.9.3 (1.2.5)

io.spray:spray-json2.9.3 MAVEN version 1.2.5 is affected by a known vulnerability. The following packages have a transitive dependency on io.spray:spray-json2.9.3 and may be impacted: - net.virtual-void:json-lenses2.9.3 0.5.4 Source cves: CVE-2018-18855 Source advisory: GHSA-WW3V-6XJF-JV28...

net.virtual-void:json-lenses_2.9.3 (0.5.4) potentially affected by CVE-2018-18855 via io.spray:spray-json_2.9.3 (1.2.5)

io.spray:spray-json2.9.3 MAVEN version 1.2.5 is affected by a known vulnerability. The following packages have a transitive dependency on io.spray:spray-json2.9.3 and may be impacted: - net.virtual-void:json-lenses2.9.3 0.5.4 Source cves: CVE-2018-18855 Source advisory: OSV:GHSA-WW3V-6XJF-JV28...

com.typesafe.akka:akka-http (3.0.0-rc1), com.typesafe.akka:akka-http-jackson (3.0.0-rc1) +3 more potentially affected by CVE-2021-23339 via com.typesafe.akka:akka-http-core (3.0.0-rc1)

com.typesafe.akka:akka-http-core MAVEN version 3.0.0-rc1 is affected by a known vulnerability. The following packages have a transitive dependency on com.typesafe.akka:akka-http-core and may be impacted: - com.typesafe.akka:akka-http 3.0.0-rc1 - com.typesafe.akka:akka-http-jackson 3.0.0-rc1 -...

Uncontrolled Resource Consumption in spray-json when parsing decimal digit fields

Lightbend Spray spray-json through 1.3.4 allows remote attackers to cause a denial of service resource consumption because of Algorithmic Complexity during the parsing of a field composed of many decimal digits...

co.actioniq:scalavro-core_2.10 (0.6.3-c3b519ae67902e6e94aab5b6635744250534e0d0), co.actioniq:scalavro_2.10 (0.6.3-c3b519ae67902e6e94aab5b6635744250534e0d0) +210 more potentially affected by CVE-2018-18853 via io.spray:spray-json_2.10 (>=1.2.5, <=1.3.4)

io.spray:spray-json2.10 MAVEN version =1.2.5, =0.10.0-m1, =0.10.0-rc1, =0.10.0-m1, =0.10.0-m1, =0.10.0-rc1, =0.10.0-rc1, =0.10.0-m1, =0.10.0-rc1, =0.10.0-m1, =0.10.3 and more Source cves: CVE-2018-18853 Source advisory: GHSA-F94M-MQHR-MC29...

GHSA-F94M-MQHR-MC29 Uncontrolled Resource Consumption in spray-json when parsing decimal digit fields

Lightbend Spray spray-json through 1.3.4 allows remote attackers to cause a denial of service resource consumption because of Algorithmic Complexity during the parsing of a field composed of many decimal digits...

GHSA-Q8XJ-8XG3-W432 Uncontrolled Resource Consumption in spray-json

Lightbend Spray spray-json through 1.3.4 allows remote attackers to cause a denial of service resource consumption because of Algorithmic Complexity during the parsing of many JSON object fields with keys that have the same hash code...

co.actioniq:scalavro-core_2.10 (0.6.3-c3b519ae67902e6e94aab5b6635744250534e0d0), co.actioniq:scalavro_2.10 (0.6.3-c3b519ae67902e6e94aab5b6635744250534e0d0) +210 more potentially affected by CVE-2018-18854 via io.spray:spray-json_2.10 (>=1.2.5, <=1.3.4)

io.spray:spray-json2.10 MAVEN version =1.2.5, =0.10.0-m1, =0.10.0-rc1, =0.10.0-m1, =0.10.0-m1, =0.10.0-rc1, =0.10.0-rc1, =0.10.0-m1, =0.10.0-rc1, =0.10.0-m1, =0.10.3 and more Source cves: CVE-2018-18854 Source advisory: GHSA-Q8XJ-8XG3-W432...

Lightbend Spray spray-json Denial of Service Vulnerability

Lightbend Spray spray-json is a lightweight JSON implementation used in Scala. A security vulnerability exists in Lightbend Spray spray-json 1.3.4 and earlier. A remote attacker can cause a denial of service resource consumption with a field consisting of multiple decimal numbers...

Lightbend Spray spray-json denial of service vulnerability (CNVD-2019-43396)

Lightbend Spray spray-json is a lightweight JSON implementation used in Scala. A security vulnerability exists in Lightbend Spray spray-json version 1.3.4 and earlier. An attacker can exploit this vulnerability to cause a denial of service resource consumption...

Denial Of Service (DoS)

spray-json is vulnerable to denial of service DoS attacks. The vulnerability exists due to the usage of a complex algorithm for parsing a field composed of many decimals...

Denial Of Service (DoS)

spray-json is vulnerable to denial of service. An attacker is able to create an object with colliding keys to cause high resource consumption when HashMap creates a map, resulting in a denial of service condition when parsing multiple JSON object fields with the same hash code...

CVE-2018-18854

Lightbend Spray spray-json through 1.3.4 allows remote attackers to cause a denial of service resource consumption because of Algorithmic Complexity during the parsing of many JSON object fields with keys that have the same hash code...

CVE-2018-18854

Lightbend Spray spray-json through 1.3.4 allows remote attackers to cause a denial of service resource consumption because of Algorithmic Complexity during the parsing of many JSON object fields with keys that have the same hash code...

CVE-2018-18853

Lightbend Spray spray-json through 1.3.4 allows remote attackers to cause a denial of service resource consumption because of Algorithmic Complexity during the parsing of a field composed of many decimal digits...

CVE-2018-18854

Lightbend Spray spray-json through 1.3.4 allows remote attackers to cause a denial of service resource consumption because of Algorithmic Complexity during the parsing of many JSON object fields with keys that have the same hash code...