Skip to main content
cve.nowby Sazabi
← Maven
MavenPackage

cn.hutool:hutool-json

6 known vulnerabilities (3 high), with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
6 · 3 high
Registry
Maven Central

Advisories 6

  • hutool v5.8.21 was discovered to contain a buffer overflow via the component JSONUtil.parse().

    Affected: fixed in 5.8.22.

  • hutool v5.8.21 was discovered to contain a buffer overflow via the component jsonObject.putByPath.

    Affected: through 5.8.21.

  • hutool v5.8.21 was discovered to contain a buffer overflow via the component jsonArray.

    Affected: through 5.8.21.

  • A stack overflow in the org.json.JSONTokener.nextValue::JSONTokener.java component of hutool-json v5.8.10 allows attackers to cause a…

    Affected: fixed in 5.8.11.

  • hutool-json v5.8.10 was discovered to contain an out of memory error.

    Affected: through 5.8.10.

  • A stack overflow in the XML.toJSONObject component of hutool-json v5.8.10 allows attackers to cause a Denial of Service (DoS) via crafted…

    Affected: fixed in 5.8.25.