high7.5
CVE-2023-39685
hson-java vulnerable to denial of service
Impact
An issue in hjson-java up to v3.0.0 allows attackers to cause a Denial of Service (DoS) via supplying a crafted JSON string to string a `StringIndexOutOfBoundsException`.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| maven | org.hjson:hjson | < 3.0.1 | 3.0.1 |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Hjson | Hjson | through 3.0.0 |