| Package | Affected versions | Patched versions |
|---|---|---|
| io.spray:spray-json_2.10 | < 1.3.5 | 1.3.5 |
| io.spray:spray-json_2.11 | < 1.3.5 | 1.3.5 |
| io.spray:spray-json_2.12 | < 1.3.5 | 1.3.5 |
| spray-json | ≤ 1.3.4 |
Lightbend Spray spray-json through 1.3.4 allows remote attackers to cause a denial of service (resource consumption) because of Algorithmic Complexity during the parsing of many JSON object fields (with keys that have the same hash code).
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free