VulnerableCode Package Details - pkg:maven/net.minidev/json-smart@1.3.0

Staging Environment: Content and features may be unstable or change without notice.

Search for packages

Package details: pkg:maven/net.minidev/json-smart@1.3.0

Essentials
History (1)

purl	pkg:maven/net.minidev/json-smart@1.3.0
Tags	Ghost

Next non-vulnerable version	2.4.9
Latest non-vulnerable version	2.5.2
Risk	4.0

Vulnerabilities affecting this package (1)

Vulnerability	Summary	Fixed by
VCID-wg6b-e8ts-w7ct Aliases: CVE-2021-31684 GHSA-fg2v-w576-w4v3	Out of bounds read in json-smart A vulnerability was discovered in the indexOf function of JSONParserByteArray in JSON Smart versions prior to 1.3.3 and 2.4.5 which causes a denial of service (DOS) via a crafted web request.	1.3.1 Affected by 2 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} 1.3.3 Affected by 1 other vulnerability. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} 2.4.1 Affected by 1 other vulnerability. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} 2.4.4 Affected by 1 other vulnerability. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }}

Vulnerability

Summary

Fixed by

VCID-wg6b-e8ts-w7ct
Aliases:
CVE-2021-31684
GHSA-fg2v-w576-w4v3

Out of bounds read in json-smart A vulnerability was discovered in the indexOf function of JSONParserByteArray in JSON Smart versions prior to 1.3.3 and 2.4.5 which causes a denial of service (DOS) via a crafted web request.

1.3.1
Affected by 2 other vulnerabilities.

1.3.3
Affected by 1 other vulnerability.

2.4.1
Affected by 1 other vulnerability.

2.4.4
Affected by 1 other vulnerability.

Vulnerabilities fixed by this package (0)

Vulnerability	Summary	Aliases
This package is not known to fix vulnerabilities.

Date	Actor	Action	Vulnerability	Source	VulnerableCode Version
2026-04-01T15:59:51.934505+00:00	GHSA Importer	Affected by	VCID-wg6b-e8ts-w7ct	https://github.com/advisories/GHSA-fg2v-w576-w4v3	38.0.0