Package · Debian

libjson-java

2 known vulnerabilities.

All Critical High Medium Low Exploited only

2 results · Feed

Medium 5.3

CVE-2024-47855 EPSS 18%

JSON-lib mishandles an unbalanced comment string

util/JSONTokener.java in JSON-lib before 3.1.0 mishandles an unbalanced comment string.

libjson-java libjson-java net.sf.json-lib:json-lib org.kordamp.json:json-lib-core Debian Ubuntu Maven

Oct 4, 2024
High 7.5

CVE-2023-5072

DoS Vulnerability in JSON-Java

Denial of Service in JSON-Java versions up to and including 20230618. A bug in the parser means that an input string of modest size can lead to indefinite amounts of memory being used.

https://github.com/stleary/JSON-java openjdk17 openjdk21 libjettison-java Debian Ubuntu Alpine Maven

Oct 12, 2023