com.cedarsoftware:json-io@4.0.0 vulnerabilities

  • latest version

    4.30.0

  • latest non vulnerable version

  • first published

    11 years ago

  • latest version published

    2 months ago

  • licenses detected

  • package manager

  • Direct Vulnerabilities

    Known vulnerabilities in the com.cedarsoftware:json-io package. This does not include vulnerabilities belonging to this package’s dependencies.

    How to fix?

    Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.

    Fix for free
    VulnerabilityVulnerable Version
    • H
    Denial of Service (DoS)

    Affected versions of this package are vulnerable to Denial of Service (DoS). Exploiting this vulnerability is possible via crafted objects that have deeply nested structures, leading to stack exhaustion

    How to fix Denial of Service (DoS)?

    Upgrade com.cedarsoftware:json-io to version 4.14.1 or higher.

    [,4.14.1)