Approved changes feed: RSS · Atom

cpe:2.3:a:json-java_project:json-java:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorJson Java Project (21502d34-0250-5719-811b-f66bc55f10bf)
ProductJson Java (1bcde2c9-2418-5b6d-8c96-7acb810b1def)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/stleary/json-java purl2cpe 2026-06-01 10:11:41.194318
pkg:golang/github.com/stleary/json-java purl2cpe 2026-06-01 10:11:41.194319
pkg:maven/com.github.iarellano/json purl2cpe 2026-06-01 10:11:41.194321

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-5072 vulnerable 2026-06-08 06:19:41.354315 DoS Vulnerability in JSON-Java
HIGH (7.5)
Denial of Service in JSON-Java versions up to and including 20230618.  A bug in the parser means that an input string of modest size can lead to indefinite amounts of memory being used.
Published: 2023-10-12T16:13:27.974Z
Updated: 2025-02-13T17:19:28.975Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-45688 vulnerable 2026-06-08 05:50:36.602386 Details available
A stack overflow in the XML.toJSONObject component of hutool-json v5.8.10 allows attackers to cause a Denial of Service (DoS) via crafted JSON or XML data.
Published: 2022-12-13T00:00:00.000Z
Updated: 2025-04-22T03:10:13.246Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.