Search for packages
| purl | pkg:maven/org.json/json@20230618 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-bxc5-jwy1-k3ar
Aliases: CVE-2023-5072 GHSA-4jq9-2xhw-jpx7 |
Denial of Service in JSON-Java versions up to and including 20230618. A bug in the parser means that an input string of modest size can lead to indefinite amounts of memory being used. |
Affected by 0 other vulnerabilities. |
|
VCID-t5h8-qa1b-fkhx
Aliases: GHSA-rm7j-f5g5-27vv |
Duplicate Advisory: Denial of Service in JSON-Java ## Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-4jq9-2xhw-jpx7. This link is maintained to preserve external references. ## Original Description Denial of Service in JSON-Java versions prior to 20230618. A bug in the parser means that an input string of modest size can lead to indefinite amounts of memory being used. |
Affected by 0 other vulnerabilities. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| This package is not known to fix vulnerabilities. | ||
| Date | Actor | Action | Vulnerability | Source | VulnerableCode Version |
|---|---|---|---|---|---|
| 2026-06-13T06:27:26.052807+00:00 | GHSA Importer | Affected by | VCID-bxc5-jwy1-k3ar | https://github.com/advisories/GHSA-4jq9-2xhw-jpx7 | 38.6.0 |
| 2026-06-13T06:27:11.639349+00:00 | GHSA Importer | Affected by | VCID-t5h8-qa1b-fkhx | https://github.com/advisories/GHSA-rm7j-f5g5-27vv | 38.6.0 |
| 2026-06-12T19:11:13.347667+00:00 | GitLab Importer | Affected by | VCID-bxc5-jwy1-k3ar | https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.json/json/CVE-2023-5072.yml | 38.6.0 |
| 2026-06-12T19:08:07.630853+00:00 | GitLab Importer | Affected by | VCID-t5h8-qa1b-fkhx | https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.json/json/GHSA-rm7j-f5g5-27vv.yml | 38.6.0 |