Skip to content
OpenAdvisories

Vendor

stleary

1 known vulnerabilities.

Products

JSON-java 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.9
    CVE-2026-59171

    JSON-java: JSONTokener Unbounded Numeric String Resource-Exhaustion DoS

    JSON-java is a reference implementation of a JSON package in Java. From version 20150729 through 20260522, JSONTokener.nextSimpleValue can accumulate unbounded numeric tokens before JSONObject.stringToNumber passes them to BigInteger or BigDecimal conversion …

    stleary JSON-java thingsboard-tb-node thingsboard-tb-mqtt-transport Wolfi Maven