High · 7.5 CVE-2023-42278 EUVD-2023-2589GHSA-rr66-qh5m-w6mx

hutool Buffer Overflow vulnerability

Published Sep 8, 2023 · Updated Sep 26, 2024 · Assigned by mitre

Description

hutool v5.8.21 was discovered to contain a buffer overflow via the component JSONUtil.parse().

Ecosystem	Package	Affected	Fixed	Record
Maven	cn.hutool:hutool-core	< 5.8.22	5.8.22	GHSA-rr66-qh5m-w6mx
Maven	cn.hutool:hutool-json	< 5.8.22	5.8.22	GHSA-rr66-qh5m-w6mx