Package · Maven

io.spray:spray-json_2.12

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Feed

Medium —

CVE-2018-18855

Uncontrolled Resource Consumption in Spray JSON

Recursive decent parsers are susceptible too StackOverflowExceptions on too deeply nested structures as currently "open" parsing state is kept on the stack.

io.spray:spray-json_2.12 io.spray:spray-json_2.10 io.spray:spray-json_2.11 io.spray:spray-json_2.12.0-M5 Maven

Jun 28, 2022
High 7.5

CVE-2018-18854

Uncontrolled Resource Consumption in spray-json

Lightbend Spray spray-json through 1.3.4 allows remote attackers to cause a denial of service (resource consumption) because of Algorithmic Complexity during the parsing of many JSON object fields (with keys that have the same hash code).

io.spray:spray-json_2.10 io.spray:spray-json_2.11 io.spray:spray-json_2.12 Maven

Oct 31, 2018
High 7.5

CVE-2018-18853

Uncontrolled Resource Consumption in spray-json when parsing decimal digit fields

Lightbend Spray spray-json through 1.3.4 allows remote attackers to cause a denial of service (resource consumption) because of Algorithmic Complexity during the parsing of a field composed of many decimal digits.

io.spray:spray-json_2.11 io.spray:spray-json_2.12 io.spray:spray-json_2.10 Maven

Oct 31, 2018