| Package | Affected versions | Patched versions |
|---|---|---|
| org.codehaus.janino:janino-parent | ≤ 3.1.9 | |
| janino | ≤ 3.1.9 |
janino 3.1.9 and earlier is subject to denial of service (DOS) attacks when using the expression evaluator.guess parameter name method. If the parser runs on user-supplied input, an attacker could supply content that causes the parser to crash due to a stack overflow.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free