GHSA-779h-3r69-4f5p
json-io vulnerable to stack exhaustion
Packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| Maven | com.cedarsoftware:json-io | < 4.14.1 | 4.14.1 |
Details
As written in the advisory (Markdown source, shown as plain text).
An issue was discovered json-io through 4.14.0 allows attackers to cause a denial of service or other unspecified impacts via crafted object that uses cyclic dependencies.
References
External links from the advisory. They lead to third-party sites.