Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/org.eclipse.parsson/parsson@1.1.3
purl pkg:maven/org.eclipse.parsson/parsson@1.1.3
Next non-vulnerable version 1.1.4
Latest non-vulnerable version 1.1.4
Risk 3.4
Vulnerabilities affecting this package (1)
Vulnerability Summary Fixed by
VCID-gckj-wdhj-wfhe
Aliases:
CVE-2023-4043
GHSA-g8p6-p27c-52fx
Eclipse Parsson Denial of Service vulnerability In Eclipse Parsson before versions 1.1.4 and 1.0.5, Parsing JSON from untrusted sources can lead malicious actors to exploit the fact that the built-in support for parsing numbers with large scale in Java has a number of edge cases where the input text of a number can lead to much larger processing time than one would expect. To mitigate the risk, parsson put in place a size limit for the numbers as well as their scale.
1.1.4
Affected by 0 other vulnerabilities.
Vulnerabilities fixed by this package (1)
Vulnerability Summary Aliases
VCID-tb3a-16zd-wfcj Eclipse Parsson stack overflow when parsing deeply nested input In Eclipse Parsson before 1.0.4 and 1.1.3, a document with a large depth of nested objects can allow an attacker to cause a Java stack overflow exception and denial of service. Eclipse Parsson allows processing (e.g. parse, generate, transform and query) JSON documents. CVE-2023-7272
GHSA-2rwm-xv5j-777p

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-16T23:04:33.391296+00:00 GitLab Importer Fixing VCID-tb3a-16zd-wfcj https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.eclipse.parsson/parsson/CVE-2023-7272.yml 38.4.0
2026-04-16T22:42:28.796570+00:00 GitLab Importer Affected by VCID-gckj-wdhj-wfhe https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.eclipse.parsson/parsson/CVE-2023-4043.yml 38.4.0
2026-04-12T00:22:28.085344+00:00 GitLab Importer Fixing VCID-tb3a-16zd-wfcj https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.eclipse.parsson/parsson/CVE-2023-7272.yml 38.3.0
2026-04-12T00:02:00.270190+00:00 GitLab Importer Affected by VCID-gckj-wdhj-wfhe https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.eclipse.parsson/parsson/CVE-2023-4043.yml 38.3.0
2026-04-03T00:30:03.268977+00:00 GitLab Importer Fixing VCID-tb3a-16zd-wfcj https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.eclipse.parsson/parsson/CVE-2023-7272.yml 38.1.0
2026-04-03T00:05:01.476947+00:00 GitLab Importer Affected by VCID-gckj-wdhj-wfhe https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.eclipse.parsson/parsson/CVE-2023-4043.yml 38.1.0
2026-04-02T12:39:45.808791+00:00 GitLab Importer Fixing VCID-tb3a-16zd-wfcj https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.eclipse.parsson/parsson/CVE-2023-7272.yml 38.0.0
2026-04-01T16:06:03.342689+00:00 GHSA Importer Fixing VCID-tb3a-16zd-wfcj https://github.com/advisories/GHSA-2rwm-xv5j-777p 38.0.0
2026-04-01T12:51:28.678952+00:00 GithubOSV Importer Fixing VCID-tb3a-16zd-wfcj https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2024/07/GHSA-2rwm-xv5j-777p/GHSA-2rwm-xv5j-777p.json 38.0.0