Vulnerability GHSA-3vqj-43w4-2q58
High Risk
HIGH RISK
CVSS Score: 7.5
Score Range: 7.0–8.9
High severity vulnerabilities (CVSS 7.0–8.9). Serious vulnerabilities that should be prioritized soon after critical fixes.
3 years ago
December 13, 2022 at 03:30 PM UTC
json stack overflow vulnerability
4.0.0 - 4.1.21 and 4.2.1 - 4.6.8 and 4.6.10 - 5.7.22 and 5.8.0.M1 and 5.8.0.M2 and 5.8.0.M3 and 5.8.0.M4 and 5.8.0 - 5.8.3 and 5.8.4.M1 and 5.8.4 - 5.8.24
4.0.0 - 4.1.21 and 4.2.1 - 4.6.8 and 4.6.10 - 5.7.22 and 5.8.0.M1 and 5.8.0.M2 and 5.8.0.M3 and 5.8.0.M4 and 5.8.0 - 5.8.3 and 5.8.4.M1 and 5.8.4 - 5.8.24
Summary
json stack overflow vulnerability
Details
A stack overflow in the XML.toJSONObject component of hutool-json v5.8.10 and org.json:json before version 20230227 allows attackers to cause a Denial of Service (DoS) via crafted JSON or XML data.
Related Vulnerabilities
Other vulnerabilities affecting the same packages
Medium Risk
8 hours ago
JSON-java: JSONTokener Has Unbounded Numeric String Resource-Exhaustion DoS
20150729 and 20151123 and 20160212 and 20160807 and 20160810 and 20170516 and 20171018 and 20180130 and 20180813 and 20190722 and 20200518 and 20201115 and 20210307 and 20211205 and 20220320 and 20220924 and 20230227 and 20230618 and 20231013 and 20240205 and 20240303 and 20241224 and 20250107 and 20250517 and 20251224 and 20260522 GHSA-ghc9-756g-vrcv
20150729 and 20151123 and 20160212 and 20160807 and 20160810 and 20170516 and 20171018 and 20180130 and 20180813 and 20190722 and 20200518 and 20201115 and 20210307 and 20211205 and 20220320 and 20220924 and 20230227 and 20230618 and 20231013 and 20240205 and 20240303 and 20241224 and 20250107 and 20250517 and 20251224 and 20260522 GHSA-ghc9-756g-vrcv
High Risk
2 years ago
Java: DoS Vulnerability in JSON-JAVA
20070829 and 20080701 and 20090211 and 20131018 and 20140107 and 20141113 and 20150729 and 20151123 and 20160212 and 20160807 and 20160810 and 20170516 and 20171018 and 20180130 and 20180813 and 20190722 and 20200518 and 20201115 and 20210307 and 20211205 and 20220320 and 20220924 and 20230227 and 20230618 GHSA-4jq9-2xhw-jpx7
20070829 and 20080701 and 20090211 and 20131018 and 20140107 and 20141113 and 20150729 and 20151123 and 20160212 and 20160807 and 20160810 and 20170516 and 20171018 and 20180130 and 20180813 and 20190722 and 20200518 and 20201115 and 20210307 and 20211205 and 20220320 and 20220924 and 20230227 and 20230618 GHSA-4jq9-2xhw-jpx7
Critical
3 years ago
hutool Buffer Overflow vulnerability
4.0.0 - 4.1.21 and 4.2.1 - 4.6.8 and 4.6.10 - 5.7.22 and 5.8.0.M1 and 5.8.0.M2 and 5.8.0.M3 and 5.8.0.M4 and 5.8.0 - 5.8.3 and 5.8.4.M1 and 5.8.4 - 5.8.21 GHSA-7p8c-crfr-q93p
4.0.0 - 4.1.21 and 4.2.1 - 4.6.8 and 4.6.10 - 5.7.22 and 5.8.0.M1 and 5.8.0.M2 and 5.8.0.M3 and 5.8.0.M4 and 5.8.0 - 5.8.3 and 5.8.4.M1 and 5.8.4 - 5.8.21 GHSA-7p8c-crfr-q93p
High Risk
3 years ago
hutool Buffer Overflow vulnerability
4.0.0 - 4.1.21 and 4.2.1 - 4.6.8 and 4.6.10 - 5.7.22 and 5.8.0.M1 and 5.8.0.M2 and 5.8.0.M3 and 5.8.0.M4 and 5.8.0 - 5.8.3 and 5.8.4.M1 and 5.8.4 - 5.8.21 GHSA-rr66-qh5m-w6mx
4.0.0 - 4.1.21 and 4.2.1 - 4.6.8 and 4.6.10 - 5.7.22 and 5.8.0.M1 and 5.8.0.M2 and 5.8.0.M3 and 5.8.0.M4 and 5.8.0 - 5.8.3 and 5.8.4.M1 and 5.8.4 - 5.8.21 GHSA-rr66-qh5m-w6mx
Critical
3 years ago
hutool Buffer Overflow vulnerability
4.0.0 - 4.1.21 and 4.2.1 - 4.6.8 and 4.6.10 - 5.7.22 and 5.8.0.M1 and 5.8.0.M2 and 5.8.0.M3 and 5.8.0.M4 and 5.8.0 - 5.8.3 and 5.8.4.M1 and 5.8.4 - 5.8.21 GHSA-rxgf-r843-g53h
4.0.0 - 4.1.21 and 4.2.1 - 4.6.8 and 4.6.10 - 5.7.22 and 5.8.0.M1 and 5.8.0.M2 and 5.8.0.M3 and 5.8.0.M4 and 5.8.0 - 5.8.3 and 5.8.4.M1 and 5.8.4 - 5.8.21 GHSA-rxgf-r843-g53h
Impacted packages
Timeline
Published
3 years ago
December 13, 2022 at 03:30 PM UTC
Last Modified
2 months ago
September 10, 2026 at 03:49 AM UTC