Approved changes feed: RSS · Atom
cpe:2.3:a:newtonsoft:json.net:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Newtonsoft (7ef64c67-3c7f-5b8e-8f28-57764c04caf4) |
|---|---|
| Product | Json.Net (a830d49d-8669-58e5-8675-b8fcabe4edc1) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from purl2cpe mapping |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/jamesnk/newtonsoft.json |
purl2cpe | 2026-06-01 10:13:09.085519 |
pkg:nuget/newtonsoft.json |
purl2cpe | 2026-06-01 10:13:09.085521 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-21907 |
vulnerable | 2026-06-08 06:29:32.581638 |
Improper Handling of Exceptional Conditions in Newtonsoft.Json
Newtonsoft.Json before version 13.0.1 is affected by a mishandling of exceptional conditions vulnerability. Crafted data that is passed to the JsonConvert.DeserializeObject method may trigger a StackOverflow exception resulting in denial of service. Depending on the usage of the library, an unauthenticated and remote attacker may be able to cause the denial of service condition.
Published: 2024-01-03T15:23:04.441Z
Updated: 2026-07-14T22:54:34.439Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.