Skip to content
OpenAdvisories

Product · Apache Software Foundation

Apache Johnzon

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.3
    CVE-2023-33008

    Apache Johnzon: Prevent inefficient internal conversion from BigDecimal at large scale

    Deserialization of Untrusted Data vulnerability in Apache Software Foundation Apache Johnzon. A malicious attacker can craft up some JSON input that uses large numbers (numbers such as 1e20000000) that Apache Johnzon will deserialize into BigDecimal and maybe…

    Apache Software Foundation Apache Johnzon org.apache.johnzon:johnzon-mapper Maven