Description
Lightbend Spray spray-json through 1.3.4 allows remote attackers to cause a denial of service (resource consumption) because of Algorithmic Complexity during the parsing of a field composed of many decimal digits.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Maven | io.spray:spray-json_2.10 | < 1.3.5 | 1.3.5 | GHSA-f94m-mqhr-mc29 |
| Maven | io.spray:spray-json_2.11 | < 1.3.5 | 1.3.5 | GHSA-f94m-mqhr-mc29 |
| Maven | io.spray:spray-json_2.12 | < 1.3.5 | 1.3.5 | GHSA-f94m-mqhr-mc29 |