~ / search / GHSA-rr66-qh5m-w6mx

GHSA-rr66-qh5m-w6mx

hutool Buffer Overflow vulnerability

Source: GitHub Advisory Database (reviewed) High CVE-2023-42278

Packages

EcosystemPackageAffectedFixed in
Maven cn.hutool:hutool-core < 5.8.22 5.8.22
Maven cn.hutool:hutool-json < 5.8.22 5.8.22

Details

As written in the advisory (Markdown source, shown as plain text).

hutool v5.8.21 was discovered to contain a buffer overflow via the component `JSONUtil.parse()`.

References

External links from the advisory. They lead to third-party sites.