CVE-2020-36325

CVE-2020-36325 affects the Jansson JSON library (up to and including 2.13.1). The issue is a parsing error in json_loads that allows an out-of-bounds read-access. Several connected sources specify that an upgrade is needed: Debian Docker/DLA entries and Mariner notes indicate vulnerability exists...

CVE-2016-4425

CVE-2016-4425 affects the Jansson JSON library (version 2.7 and earlier). The issue allows context-dependent attackers to cause a denial of service via crafted JSON data, resulting in deep recursion, stack consumption, and a crash. Reports in connected documents confirm affected releases and the ...

CVE-2013-6401

CVE-2013-6401 affects Jansson (2.4 and earlier) with predictable hash collisions enabling context-dependent attackers to trigger a denial of service (CPU consumption) via crafted JSON. IBM DataPower Gateway (ODR component) uses Jansson and lists affected versions: 10.6CD 10.6.1.0–10.6.5.0; 10.5.0...