| Package | Affected versions | Patched versions |
|---|---|---|
| org.eclipse.parsson:parsson | ≥ 1.1.0, < 1.1.3< 1.0.4 | 1.1.31.0.4 |
| parsson | ≥ 1.1.0, < 1.1.3< 1.0.4 | 1.1.31.0.4 |
In Eclipse Parsson before 1.0.4 and 1.1.3, a document with a large depth of nested objects can allow an attacker to cause a Java stack overflow exception and denial of service. Eclipse Parsson allows processing (e.g. parse, generate, transform and query) JSON documents.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free