GHSA-f94m-mqhr-mc29
Uncontrolled Resource Consumption in spray-json when parsing decimal digit fields
Packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| Maven | io.spray:spray-json_2.12 | < 1.3.5 | 1.3.5 |
| Maven | io.spray:spray-json_2.11 | < 1.3.5 | 1.3.5 |
| Maven | io.spray:spray-json_2.10 | < 1.3.5 | 1.3.5 |
Details
As written in the advisory (Markdown source, shown as plain text).
Lightbend Spray spray-json through 1.3.4 allows remote attackers to cause a denial of service (resource consumption) because of Algorithmic Complexity during the parsing of a field composed of many decimal digits.
References
External links from the advisory. They lead to third-party sites.