Approved changes feed: RSS · Atom

cpe:2.3:a:hutool:hutool:5.8.10:*:*:*:*:*:*:*

part: a version: 5.8.10 update: *

VendorHutool (b6511075-62d6-5ca4-bfca-b299c226d261)
ProductHutool (1e39a136-5d31-536b-8e4b-4fc84e4c37b6)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:gitee/dromara/hutool purl2cpe 2026-06-01 10:12:32.608002
pkg:github/dromara/hutool purl2cpe 2026-06-01 10:12:32.608004
pkg:maven/cn.hutool/hutool-all purl2cpe 2026-06-01 10:12:32.608005

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-45690 vulnerable 2026-06-08 05:50:36.604692 Details available
A stack overflow in the org.json.JSONTokener.nextValue::JSONTokener.java component of hutool-json v5.8.10 allows attackers to cause a Denial of Service (DoS) via crafted JSON or XML data.
Published: 2022-12-13T00:00:00.000Z
Updated: 2025-04-22T15:00:11.454Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-45689 vulnerable 2026-06-08 05:50:36.604161 Details available
hutool-json v5.8.10 was discovered to contain an out of memory error.
Published: 2022-12-13T00:00:00.000Z
Updated: 2025-04-22T15:02:36.640Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-45688 vulnerable 2026-06-08 05:50:36.601263 Details available
A stack overflow in the XML.toJSONObject component of hutool-json v5.8.10 allows attackers to cause a Denial of Service (DoS) via crafted JSON or XML data.
Published: 2022-12-13T00:00:00.000Z
Updated: 2025-04-22T03:10:13.246Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.