| Package | Affected versions | Patched versions |
|---|---|---|
| io.spray:spray-json_2.10 | < 1.3.5 | 1.3.5 |
| io.spray:spray-json_2.11 | < 1.3.5 | 1.3.5 |
| io.spray:spray-json_2.12 | < 1.3.5 | 1.3.5 |
| spray-json | ≤ 1.3.4 |
Lightbend Spray spray-json through 1.3.4 allows remote attackers to cause a denial of service (resource consumption) because of Algorithmic Complexity during the parsing of a field composed of many decimal digits.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free