Skip to content
OpenAdvisories
Medium DLA-3184-1 1 CVE

libjettison-java - security update

Published Nov 10, 2022 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 10 libjettison-java 1.4.0-1+deb10u1

Vulnerabilities 1

  • Medium 6.5
    CVE-2022-40149

    Stack Buffer Overflow in Jettison

    Those using Jettison to parse untrusted XML or JSON data may be vulnerable to Denial of Service attacks (DOS). If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stackoverflow. This effect may su…

    Jettison Jettison druid libjettison-java Debian Ubuntu Wolfi Maven