Description
Certain input files could make the code to enter into an infinite loop when Apache Sanselan 0.97-incubator was used to parse them, which could be used in a DoS attack. Note that Apache Sanselan (incubating) was renamed to Apache Commons Imaging.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | Apache Commons Imaging | Apache Sanselan 0.97-incubator | — |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Maven | org.apache.sanselan:sanselan | <= 0.97-incubator | — | GHSA-g99m-3m46-4gm9 |