high7.5
CVE-2023-42278
hutool Buffer Overflow vulnerability
Impact
hutool v5.8.21 was discovered to contain a buffer overflow via the component `JSONUtil.parse()`.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| maven | cn.hutool:hutool-core | < 5.8.22 | 5.8.22 |
| maven | cn.hutool:hutool-json | < 5.8.22 | 5.8.22 |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Hutool | Hutool | Version 5.8.21 |