Skip to content
OpenAdvisories
High · 7.5 CVE-2020-26883 EUVD-2022-1119GHSA-p8p6-rcp6-4mrm

Uncontrolled Recursion in Play Framework

Published Nov 6, 2020 · Updated Aug 4, 2024 · Assigned by mitre

Package: com.typesafe.play:play Package: com.typesafe.play:play-java Ecosystem: Maven

Description

In Play Framework 2.6.0 through 2.8.2, stack consumption can occur because of unbounded recursion during parsing of crafted JSON documents.

Affected packages

EcosystemPackageAffectedFixedRecord
Maven com.typesafe.play:play >= 2.6.0, < 2.7.6 2.7.6 GHSA-p8p6-rcp6-4mrm
Maven com.typesafe.play:play >= 2.8.0, < 2.8.3 2.8.3 GHSA-p8p6-rcp6-4mrm
Maven com.typesafe.play:play-java >= 2.6.0, < 2.7.6 2.7.6 GHSA-p8p6-rcp6-4mrm
Maven com.typesafe.play:play-java >= 2.8.0, < 2.8.3 2.8.3 GHSA-p8p6-rcp6-4mrm

References