Skip to content
OpenAdvisories

Product · jopenlibs

vault-java-driver

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.5
    CVE-2026-112072

    vault-java-driver: stored deeply nested JSON kills every thread that reads it

    vault-java-driver, a Java client for HashiCorp Vault, parses Vault's JSON responses with a vendored minimal-json parser that has no nesting depth limit. A deeply nested value raises a StackOverflowError, which escapes catch (Exception) handlers and kills the …

    jopenlibs vault-java-driver