json-smart: Potential DoS via stack exhaustion (incomplete fix for CVE-2023-1370)

A flaw was found in the JSON-smart library. In affected versions, specially crafted JSON input may trigger stack exhaustion, potentially leading to an application crash or denial of service. This issue exists due to an incomplete fix for CVE-2023-1370...

CVE-2023-1370

creationtimestamp| type| source ---|---|--- 2024-02-08 12:06:32+00:00| seen| https://t.me/ctinow/181311 2024-02-08 13:11:32+00:00| seen| https://t.me/ctinow/181352 2024-02-08 14:41:39+00:00| seen| https://t.me/ctinow/181398 2024-02-08 15:11:33+00:00| seen| https://t.me/ctinow/181415 2024-02-08...

OESA-2023-1203 json-smart security update

Json-smart is a performance focused, JSON processor lib. Security Fixes: Json-smart is a performance focused, JSON processor lib. When reaching a ‘‘ or ‘‘ character in the JSON input, the code parses an array or an object respectively. It was discovered that the code does not have any limit to th...

africa.absa:inception-test (>=1.0.0 <=1.2.0), ai.apiverse:apipulse (=1.0.1) +15397 more potentially affected by CVE-2023-1370 via net.minidev:json-smart (>=1.0.6.3 <=2.4.8)

net.minidev:json-smart MAVEN version =1.0.6.3, =1.0.0, =1.0.1, =1.0.6, =1.0.6, =1.1, =1.1.1, =1.2, =1.2, =1.2.3, =1.2.3, =0.0.25, =0.0.25, =0.0.62, =def544ccef5f753238ecc4adfc2eaa7d2fc36d53-0.0.91 and more Source cves: CVE-2023-1370 Source advisory: OSV:GHSA-493P-PFQ6-5258...

DEBIAN-CVE-2023-1370

Json-smart is a performance focused, JSON processor lib. When reaching a ‘‘ or ‘‘ character in the JSON input, the code parses an array or an object respectively. It was discovered that the code does not have any limit to the nesting of such arrays or objects. Since the parsing of nested arrays a...