org.json:json

3 results · Feed

• Medium 5.9
  CVE-2026-59171

  JSON-java: JSONTokener Unbounded Numeric String Resource-Exhaustion DoS

  JSON-java is a reference implementation of a JSON package in Java. From version 20150729 through 20260522, JSONTokener.nextSimpleValue can accumulate unbounded numeric tokens before JSONObject.stringToNumber passes them to BigInteger or BigDecimal conversion …

  stleary JSON-java thingsboard-tb-node thingsboard-tb-mqtt-transport Wolfi Maven
  Nov 6, 2026
• High 7.5
  CVE-2023-5072

  DoS Vulnerability in JSON-Java

  Denial of Service in JSON-Java versions up to and including 20230618.  A bug in the parser means that an input string of modest size can lead to indefinite amounts of memory being used.

  https://github.com/stleary/JSON-java openjdk17 openjdk21 libjettison-java Debian Ubuntu Alpine Maven
  Oct 12, 2023
• High 7.5
  CVE-2022-45688 Public exploit

  json stack overflow vulnerability

  A stack overflow in the XML.toJSONObject component of hutool-json v5.8.10 allows attackers to cause a Denial of Service (DoS) via crafted JSON or XML data.

  cn.hutool:hutool-json org.json:json Maven
  Dec 13, 2022