Vulnerability GHSA-rr66-qh5m-w6mx
High Risk
HIGH RISK
CVSS Score: 7.5
Score Range: 7.0–8.9
High severity vulnerabilities (CVSS 7.0–8.9). Serious vulnerabilities that should be prioritized soon after critical fixes.
3 years ago
September 09, 2023 at 12:30 AM UTC
hutool Buffer Overflow vulnerability
4.0.0 - 4.1.21 and 4.2.1 - 4.6.8 and 4.6.10 - 5.7.22 and 5.8.0.M1 and 5.8.0.M2 and 5.8.0.M3 and 5.8.0.M4 and 5.8.0 - 5.8.3 and 5.8.4.M1 and 5.8.4 - 5.8.21
4.0.0 - 4.1.21 and 4.2.1 - 4.6.8 and 4.6.10 - 5.7.22 and 5.8.0.M1 and 5.8.0.M2 and 5.8.0.M3 and 5.8.0.M4 and 5.8.0 - 5.8.3 and 5.8.4.M1 and 5.8.4 - 5.8.21
Summary
hutool Buffer Overflow vulnerability
Details
hutool v5.8.21 was discovered to contain a buffer overflow via the component JSONUtil.parse().
Related Vulnerabilities
Other vulnerabilities affecting the same packages
High Risk
2 years ago
hutool-core discovered to contain an infinite loop in the StrSplitter.splitByRegex function
4.0.0 - 4.1.21 and 4.2.1 - 4.6.8 and 4.6.10 - 5.7.22 and 5.8.0.M1 and 5.8.0.M2 and 5.8.0.M3 and 5.8.0.M4 and 5.8.0 - 5.8.3 and 5.8.4.M1 and 5.8.4 - 5.8.23 GHSA-7m7h-rgvp-3v4r
4.0.0 - 4.1.21 and 4.2.1 - 4.6.8 and 4.6.10 - 5.7.22 and 5.8.0.M1 and 5.8.0.M2 and 5.8.0.M3 and 5.8.0.M4 and 5.8.0 - 5.8.3 and 5.8.4.M1 and 5.8.4 - 5.8.23 GHSA-7m7h-rgvp-3v4r
High Risk
2 years ago
hutool-core was discovered to contain a stack overflow via NumberUtil.toBigDecimal method
5.8.22 - 5.8.24 GHSA-m5hf-m3r2-xq53
5.8.22 - 5.8.24 GHSA-m5hf-m3r2-xq53
Critical
3 years ago
hutool Buffer Overflow vulnerability
4.0.0 - 5.8.21 GHSA-7p8c-crfr-q93p
4.0.0 - 5.8.21 GHSA-7p8c-crfr-q93p
Critical
3 years ago
hutool Buffer Overflow vulnerability
4.0.0 - 5.8.21 GHSA-7p8c-crfr-q93p
4.0.0 - 5.8.21 GHSA-7p8c-crfr-q93p
Critical
3 years ago
hutool Buffer Overflow vulnerability
4.0.0 - 4.1.21 and 4.2.1 - 4.6.8 and 4.6.10 - 5.7.22 and 5.8.0.M1 and 5.8.0.M2 and 5.8.0.M3 and 5.8.0.M4 and 5.8.0 - 5.8.3 and 5.8.4.M1 and 5.8.4 - 5.8.21 GHSA-rxgf-r843-g53h
4.0.0 - 4.1.21 and 4.2.1 - 4.6.8 and 4.6.10 - 5.7.22 and 5.8.0.M1 and 5.8.0.M2 and 5.8.0.M3 and 5.8.0.M4 and 5.8.0 - 5.8.3 and 5.8.4.M1 and 5.8.4 - 5.8.21 GHSA-rxgf-r843-g53h
Impacted packages
Timeline
Published
3 years ago
September 09, 2023 at 12:30 AM UTC
Last Modified
1 year ago
January 03, 2025 at 07:29 PM UTC