Skip to content
OpenAdvisories
High · 7.5 CVE-2022-25024 EUVD-2023-0101GHSA-8rj5-2857-877jPYSEC-2023-149

json2xml Uncaught Exception vulnerability

Published Aug 22, 2023 · Updated Oct 3, 2024 · Assigned by mitre

Description

The json2xml package through 3.12.0 for Python allows an error in typecode decoding enabling a remote attack that can lead to an exception, causing a denial of service.

Affected packages

EcosystemPackageAffectedFixedRecord
PyPI json2xml < 3.14.0 3.14.0 GHSA-8rj5-2857-877j

References