Skip to content
OpenAdvisories

Product · java-json-tools

json-patch

3 known vulnerabilities.

3 results · Feed

  • Medium 6.3

    java-json-tools json-patch Copy Move Operations CopyOperation.java MoveOperation.apply access control

    A vulnerability was identified in java-json-tools json-patch up to 1.13. This affects the function CopyOperation.apply/MoveOperation.apply of the file src/main/java/com/github/fge/jsonpatch/CopyOperation.java of the component Copy Move Operations. The manipul…

  • Medium 5.3

    java-json-tools json-patch Patch Operation JsonPatch.java JsonPatch.apply resource consumption

    A vulnerability has been found in java-json-tools json-patch up to 1.13. Affected by this vulnerability is the function JsonPatch.apply of the file src/main/java/com/github/fge/jsonpatch/JsonPatch.java of the component Patch Operation Handler. The manipulatio…

  • Medium 5.3

    java-json-tools json-patch JsonMergePatchDeserializer.java JsonMergePatch.fromJson stack-based overflow

    A flaw has been found in java-json-tools json-patch up to 1.13. Affected is the function JsonMergePatch.fromJson of the file JsonMergePatchDeserializer.java. Executing a manipulation can lead to stack-based buffer overflow. The attack may be performed from re…