Ecosyste.ms: Advisories
An open API service providing security vulnerability metadata for many open source software ecosystems.
Security Advisories: GSA_kwCzR0hTQS13d2NwLTI2d2MtM2Z4bc4AA_86
JSON-lib mishandles an unbalanced comment string
util/JSONTokener.java in JSON-lib before 3.1.0 mishandles an unbalanced comment string.
Permalink: https://github.com/advisories/GHSA-wwcp-26wc-3fxmJSON: https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS13d2NwLTI2d2MtM2Z4bc4AA_86
Source: GitHub Advisory Database
Origin: Unspecified
Severity: Moderate
Classification: General
Published: 18 days ago
Updated: 17 days ago
Identifiers: GHSA-wwcp-26wc-3fxm, CVE-2024-47855
References:
- https://nvd.nist.gov/vuln/detail/CVE-2024-47855
- https://github.com/kordamp/json-lib/commit/a0c4a0eae277130e22979cf307c95dec4005a78e
- https://github.com/kordamp/json-lib/compare/v3.0.3...v3.1.0
- https://github.com/advisories/GHSA-wwcp-26wc-3fxm
Blast Radius: 0.0
Affected Packages
maven:org.kordamp.json:json-lib-core
Dependent packages: 0Dependent repositories: 3
Downloads:
Affected Version Ranges: < 3.1.0
Fixed in: 3.1.0
All affected versions: 3.0.1, 3.0.2, 3.0.3
All unaffected versions: