net.minidev:json-smart

4 results · Feed

• High 7.5
  CVE-2024-57699

  Netplex Json-smart Uncontrolled Recursion vulnerability

  A security issue was found in Netplex Json-smart 2.5.0 through 2.5.1. When loading a specially crafted JSON input, containing a large number of ’{’, a stack exhaustion can be trigger, which could allow an attacker to cause a Denial of Service (DoS). This issu…

  trino trino-plugin-opensearch trino-plugin-pinot trino-plugin-lakehouse Debian Ubuntu Wolfi Maven
  Feb 5, 2025
• High 7.5
  CVE-2023-1370

  Stack exhaustion in json-smart leads to denial of service when parsing malformed JSON

  [Json-smart](https://netplex.github.io/json-smart/) is a performance focused, JSON processor lib. When reaching a ‘[‘ or ‘{‘ character in the JSON input, the code parses an array or an object respectively. It was discovered that the code does not have any lim…

  json-smart json-smart druid thingsboard-tb-node Debian Ubuntu Wolfi Maven
  Mar 13, 2023
• High 7.5
  CVE-2021-31684

  Out of bounds read in json-smart

  A vulnerability was discovered in the indexOf function of JSONParserByteArray in JSON Smart versions 1.3 and 2.4 which causes a denial of service (DOS) via a crafted web request.

  druid thingsboard-tb-node thingsboard-tb-mqtt-transport celeborn-0.6 Debian Ubuntu Wolfi Maven
  Jun 1, 2021
• Medium 5.9
  CVE-2021-27568 Public exploit

  Improper Check for Unusual or Exceptional Conditions in json-smart

  An issue was discovered in netplex json-smart-v1 through 2015-10-23 and json-smart-v2 through 2.4. An exception is thrown from a function, but it is not caught, as demonstrated by NumberFormatException. When it is not caught, it may cause programs using the l…

  net.minidev:json-smart net.minidev:json-smart-mini Maven
  Feb 23, 2021