Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/net.minidev/json-smart@2.4.4
purl pkg:maven/net.minidev/json-smart@2.4.4
Next non-vulnerable version 2.4.9
Latest non-vulnerable version 2.5.2
Risk 4.0
Vulnerabilities affecting this package (1)
Vulnerability Summary Fixed by
VCID-7k5m-ys11-mfby
Aliases:
CVE-2023-1370
GHSA-493p-pfq6-5258
json-smart Uncontrolled Recursion vulnerability Affected versions of [net.minidev:json-smart](https://github.com/netplex/json-smart-v1) are vulnerable to Denial of Service (DoS) due to a StackOverflowError when parsing a deeply nested JSON array or object. When reaching a ‘[‘ or ‘{‘ character in the JSON input, the code parses an array or an object respectively. It was discovered that the 3PP does not have any limit to the nesting of such arrays or objects. Since the parsing of nested arrays and objects is done recursively, nesting too many of them can cause stack exhaustion (stack overflow) and crash the software.
2.4.9
Affected by 0 other vulnerabilities.
Vulnerabilities fixed by this package (1)
Vulnerability Summary Aliases
VCID-wg6b-e8ts-w7ct Out of bounds read in json-smart A vulnerability was discovered in the indexOf function of JSONParserByteArray in JSON Smart versions prior to 1.3.3 and 2.4.5 which causes a denial of service (DOS) via a crafted web request. CVE-2021-31684
GHSA-fg2v-w576-w4v3

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-16T22:24:42.296503+00:00 GitLab Importer Affected by VCID-7k5m-ys11-mfby https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/net.minidev/json-smart/CVE-2023-1370.yml 38.4.0
2026-04-11T23:42:52.303105+00:00 GitLab Importer Affected by VCID-7k5m-ys11-mfby https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/net.minidev/json-smart/CVE-2023-1370.yml 38.3.0
2026-04-02T23:46:44.255616+00:00 GitLab Importer Affected by VCID-7k5m-ys11-mfby https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/net.minidev/json-smart/CVE-2023-1370.yml 38.1.0
2026-04-01T18:09:58.927598+00:00 GitLab Importer Affected by VCID-7k5m-ys11-mfby https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/net.minidev/json-smart/CVE-2023-1370.yml 38.0.0
2026-04-01T15:59:51.973949+00:00 GHSA Importer Fixing VCID-wg6b-e8ts-w7ct https://github.com/advisories/GHSA-fg2v-w576-w4v3 38.0.0
2026-04-01T13:06:13.204903+00:00 GithubOSV Importer Fixing VCID-wg6b-e8ts-w7ct https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/02/GHSA-fg2v-w576-w4v3/GHSA-fg2v-w576-w4v3.json 38.0.0