high7.5
CVE-2023-34610
json-io vulnerable to stack exhaustion
Impact
An issue was discovered json-io through 4.14.0 allows attackers to cause a denial of service or other unspecified impacts via crafted object that uses cyclic dependencies.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| maven | com.cedarsoftware:json-io | < 4.14.1 | 4.14.1 |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Json-Io Project | Json-Io | through 4.14.0 |