High DLA-3373-1 2 CVEs

json-smart - security update

Published Mar 30, 2023 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

Release	Package	Fixed in
Debian · 10	json-smart	2.2-2+deb10u1

Vulnerabilities 2

High 7.5

CVE-2021-31684

Out of bounds read in json-smart

A vulnerability was discovered in the indexOf function of JSONParserByteArray in JSON Smart versions 1.3 and 2.4 which causes a denial of service (DOS) via a crafted web request.

druid thingsboard-tb-node thingsboard-tb-mqtt-transport celeborn-0.6 Debian Ubuntu Wolfi Maven

Jun 1, 2021
High 7.5

CVE-2023-1370

Stack exhaustion in json-smart leads to denial of service when parsing malformed JSON

[Json-smart](https://netplex.github.io/json-smart/) is a performance focused, JSON processor lib. When reaching a ‘[‘ or ‘{‘ character in the JSON input, the code parses an array or an object respectively. It was discovered that the code does not have any lim…

json-smart json-smart druid thingsboard-tb-node Debian Ubuntu Wolfi Maven

Mar 13, 2023