Vulnerability GHSA-m5hf-m3r2-xq53
High Risk
HIGH RISK
CVSS Score: 7.5
Score Range: 7.0–8.9
High severity vulnerabilities (CVSS 7.0–8.9). Serious vulnerabilities that should be prioritized soon after critical fixes.
2 years ago
December 27, 2023 at 09:31 PM UTC
hutool-core was discovered to contain a stack overflow via NumberUtil.toBigDecimal method
5.8.22 - 5.8.24
5.8.22 - 5.8.24
Summary
hutool-core was discovered to contain a stack overflow via NumberUtil.toBigDecimal method
Details
The NumberUtil.toBigDecimal method in hutool-core was discovered to contain a stack overflow.
Related Vulnerabilities
Other vulnerabilities affecting the same packages
High Risk
2 years ago
hutool-core discovered to contain an infinite loop in the StrSplitter.splitByRegex function
4.0.0 - 5.8.23 GHSA-7m7h-rgvp-3v4r
4.0.0 - 5.8.23 GHSA-7m7h-rgvp-3v4r
Critical
3 years ago
hutool Buffer Overflow vulnerability
4.0.0 - 5.8.21 GHSA-7p8c-crfr-q93p
4.0.0 - 5.8.21 GHSA-7p8c-crfr-q93p
High Risk
3 years ago
hutool Buffer Overflow vulnerability
4.0.0 - 5.8.21 GHSA-rr66-qh5m-w6mx
4.0.0 - 5.8.21 GHSA-rr66-qh5m-w6mx
Critical
3 years ago
hutool Buffer Overflow vulnerability
4.0.0 - 5.8.21 GHSA-rxgf-r843-g53h
4.0.0 - 5.8.21 GHSA-rxgf-r843-g53h
High Risk
3 years ago
HuTool XML parsing module has blind XXE vulnerability
4.0.0 - 5.8.19 GHSA-p2qf-9vp6-3jjq
4.0.0 - 5.8.19 GHSA-p2qf-9vp6-3jjq
Impacted packages
Timeline
Published
2 years ago
December 27, 2023 at 09:31 PM UTC
Last Modified
2 years ago
February 16, 2024 at 08:24 AM UTC