Vulnerability GHSA-7p8c-crfr-q93p
Critical
CRITICAL RISK
CVSS Score: 9.8
Score Range: 9.0–10.0
Critical severity vulnerabilities (CVSS 9.0–10.0). These represent the highest impact issues.
3 years ago
September 09, 2023 at 12:30 AM UTC
hutool Buffer Overflow vulnerability
4.0.0 - 4.1.21 and 4.2.1 - 4.6.8 and 4.6.10 - 5.7.22 and 5.8.0.M1 and 5.8.0.M2 and 5.8.0.M3 and 5.8.0.M4 and 5.8.0 - 5.8.3 and 5.8.4.M1 and 5.8.4 - 5.8.21
4.0.0 - 4.1.21 and 4.2.1 - 4.6.8 and 4.6.10 - 5.7.22 and 5.8.0.M1 and 5.8.0.M2 and 5.8.0.M3 and 5.8.0.M4 and 5.8.0 - 5.8.3 and 5.8.4.M1 and 5.8.4 - 5.8.21
Summary
hutool Buffer Overflow vulnerability
Details
hutool v5.8.21 was discovered to contain a buffer overflow via the component jsonObject.putByPath.
Related Vulnerabilities
Other vulnerabilities affecting the same packages
High Risk
2 years ago
hutool-core discovered to contain an infinite loop in the StrSplitter.splitByRegex function
4.0.0 - 4.1.21 and 4.2.1 - 4.6.8 and 4.6.10 - 5.7.22 and 5.8.0.M1 and 5.8.0.M2 and 5.8.0.M3 and 5.8.0.M4 and 5.8.0 - 5.8.3 and 5.8.4.M1 and 5.8.4 - 5.8.23 GHSA-7m7h-rgvp-3v4r
4.0.0 - 4.1.21 and 4.2.1 - 4.6.8 and 4.6.10 - 5.7.22 and 5.8.0.M1 and 5.8.0.M2 and 5.8.0.M3 and 5.8.0.M4 and 5.8.0 - 5.8.3 and 5.8.4.M1 and 5.8.4 - 5.8.23 GHSA-7m7h-rgvp-3v4r
High Risk
2 years ago
hutool-core was discovered to contain a stack overflow via NumberUtil.toBigDecimal method
5.8.22 - 5.8.24 GHSA-m5hf-m3r2-xq53
5.8.22 - 5.8.24 GHSA-m5hf-m3r2-xq53
High Risk
3 years ago
hutool Buffer Overflow vulnerability
4.0.0 - 5.8.21 GHSA-rr66-qh5m-w6mx
4.0.0 - 5.8.21 GHSA-rr66-qh5m-w6mx
High Risk
3 years ago
hutool Buffer Overflow vulnerability
4.0.0 - 5.8.21 GHSA-rr66-qh5m-w6mx
4.0.0 - 5.8.21 GHSA-rr66-qh5m-w6mx
Critical
3 years ago
hutool Buffer Overflow vulnerability
4.0.0 - 4.1.21 and 4.2.1 - 4.6.8 and 4.6.10 - 5.7.22 and 5.8.0.M1 and 5.8.0.M2 and 5.8.0.M3 and 5.8.0.M4 and 5.8.0 - 5.8.3 and 5.8.4.M1 and 5.8.4 - 5.8.21 GHSA-rxgf-r843-g53h
4.0.0 - 4.1.21 and 4.2.1 - 4.6.8 and 4.6.10 - 5.7.22 and 5.8.0.M1 and 5.8.0.M2 and 5.8.0.M3 and 5.8.0.M4 and 5.8.0 - 5.8.3 and 5.8.4.M1 and 5.8.4 - 5.8.21 GHSA-rxgf-r843-g53h
Impacted packages
Timeline
Published
3 years ago
September 09, 2023 at 12:30 AM UTC
Last Modified
2 years ago
February 16, 2024 at 08:22 AM UTC