Skip to content
OpenAdvisories

Package · Debian

json-smart

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

4 results · Feed

  • Medium 5.3
    CVE-2026-113602

    json-smart through 2.6.0 Strict-Mode Validation Bypass via 0x1A Character

    json-smart through 2.6.0 contains an input validation bypass vulnerability that allows attackers to evade strict-mode trailing-data checks by inserting a literal 0x1A character. Attackers can append 0x1A and malformed content to pass JSONValue.parseStrict or …

    json-smart json-smart json-smart json-smart Debian Ubuntu
  • High 7.5
    CVE-2024-57699

    Netplex Json-smart Uncontrolled Recursion vulnerability

    A security issue was found in Netplex Json-smart 2.5.0 through 2.5.1. When loading a specially crafted JSON input, containing a large number of ’{’, a stack exhaustion can be trigger, which could allow an attacker to cause a Denial of Service (DoS). This issu…

    net.minidev:json-smart json-smart json-smart Debian Ubuntu Maven
  • High 7.5
    CVE-2023-1370

    Stack exhaustion in json-smart leads to denial of service when parsing malformed JSON

    [Json-smart](https://netplex.github.io/json-smart/) is a performance focused, JSON processor lib. When reaching a ‘[‘ or ‘{‘ character in the JSON input, the code parses an array or an object respectively. It was discovered that the code does not have any lim…

    json-smart json-smart json-smart json-smart Debian Ubuntu Maven
  • High 7.5
    CVE-2021-31684

    Out of bounds read in json-smart

    A vulnerability was discovered in the indexOf function of JSONParserByteArray in JSON Smart versions 1.3 and 2.4 which causes a denial of service (DOS) via a crafted web request.

    net.minidev:json-smart json-smart json-smart Debian Ubuntu Maven