| Package | Affected versions | Patched versions |
|---|---|---|
| net.sf.json-lib:json-lib | ≤ 2.4 | |
| org.kordamp.json:json-lib-core | < 3.1.0 | 3.1.0 |
util/JSONTokener.java in JSON-lib before 3.1.0 mishandles an unbalanced comment string.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free