VULNERABILITY

CVE search

Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.

402,245 vulnerabilities · 1,766 actively exploited (CISA KEV)

cn.hutool:hutool-json ✕Clear filters

6 results

ID	Severity	Summary	Published
CVE-2023-42278	HIGH7.5	hutool v5.8.21 was discovered to contain a buffer overflow via the component JSONUtil.parse().	08/09/2023
CVE-2023-42277	CRITICAL9.8	hutool v5.8.21 was discovered to contain a buffer overflow via the component jsonObject.putByPath.	08/09/2023
CVE-2023-42276	CRITICAL9.8	hutool v5.8.21 was discovered to contain a buffer overflow via the component jsonArray.	08/09/2023
CVE-2022-45690	HIGH7.5	A stack overflow in the org.json.JSONTokener.nextValue::JSONTokener.java component of hutool-json v5.8.10 allows attackers to cause a Denial of Service (DoS) via crafted JSON or XML data.