Description
Certain input files could make the code hang when Apache Sanselan 0.97-incubator was used to parse them, which could be used in a DoS attack. Note that Apache Sanselan (incubating) was renamed to Apache Commons Imaging.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | Apache Commons Imaging | Apache Sanselan 0.97-incubator | — |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Maven | org.apache.sanselan:sanselan | <= 0.97-incubator | — | GHSA-rjx9-2936-9ffx |