~ / search / GHSA-94w5-rf69-2h6c

GHSA-94w5-rf69-2h6c

hson-java vulnerable to denial of service

Source: GitHub Advisory Database (reviewed) High CVE-2023-39685

Packages

EcosystemPackageAffectedFixed in
Maven org.hjson:hjson < 3.0.1 3.0.1

Details

As written in the advisory (Markdown source, shown as plain text).

An issue in hjson-java up to v3.0.0 allows attackers to cause a Denial of Service (DoS) via supplying a crafted JSON string to string a `StringIndexOutOfBoundsException`.

References

External links from the advisory. They lead to third-party sites.