This page lists publicly disclosed CVE vulnerabilities affecting stleary json-java (linked via NVD CPE). Each row includes severity scores, summaries, and publication dates to help identify and analyze security issues.
| CVE | Summary | Source | Max CVSS | EPSS % | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2023-5072 | Denial of Service in JSON-Java versions up to and including 20230618. A bug in the parser means that an input string of modest size can lead to indefinite amounts of memory being used. | [email protected] | 7.5 | 0.68% | 2023-10-12 | 2025-09-19 |
| CVE-2022-45690 | A stack overflow in the org.json.JSONTokener.nextValue::JSONTokener.java component of hutool-json v5.8.10 allows attackers to cause a Denial of Service (DoS) via crafted JSON or XML data. | [email protected] | 7.5 | 0.25% | 2022-12-13 | 2025-09-25 |
| CVE-2022-45688 | A stack overflow in the XML.toJSONObject component of hutool-json v5.8.10 allows attackers to cause a Denial of Service (DoS) via crafted JSON or XML data. | [email protected] | 7.5 | 1.28% | 2022-12-13 | 2025-09-19 |