~ / search / GHSA-7p8c-crfr-q93p

GHSA-7p8c-crfr-q93p

hutool Buffer Overflow vulnerability

Source: GitHub Advisory Database (reviewed) Critical CVE-2023-42277

Packages

EcosystemPackageAffectedFixed in
Maven cn.hutool:hutool-core <= 5.8.21 no fix listed
Maven cn.hutool:hutool-json <= 5.8.21 no fix listed

Details

As written in the advisory (Markdown source, shown as plain text).

hutool v5.8.21 was discovered to contain a buffer overflow via the component `jsonObject.putByPath`.

References

External links from the advisory. They lead to third-party sites.