Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:deb/debian/libjettison-java@1.2-2
purl pkg:deb/debian/libjettison-java@1.2-2
Next non-vulnerable version 1.5.4-1
Latest non-vulnerable version 1.5.4-1
Risk 4.0
Vulnerabilities affecting this package (4)
Vulnerability Summary Fixed by
VCID-4ue8-9kcp-uqah
Aliases:
CVE-2022-40149
GHSA-56h3-78gp-v83r
Those using Jettison to parse untrusted XML or JSON data may be vulnerable to Denial of Service attacks (DOS). If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stackoverflow. This effect may support a denial of service attack.
1.5.3-1~deb11u1
Affected by 1 other vulnerability.
VCID-8ra7-fpsb-5ye8
Aliases:
CVE-2022-45693
GHSA-grr4-wv38-f68w
1.5.3-1~deb11u1
Affected by 1 other vulnerability.
VCID-d6mc-ypf1-uqgs
Aliases:
CVE-2022-45685
GHSA-7rf3-mqpx-h7xg
1.5.3-1~deb11u1
Affected by 1 other vulnerability.
VCID-fh9y-kdy5-guau
Aliases:
CVE-2022-40150
GHSA-x27m-9w8j-5vcw
1.5.3-1~deb11u1
Affected by 1 other vulnerability.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2026-06-13T08:15:58.491019+00:00 Debian Oval Importer Affected by VCID-4ue8-9kcp-uqah https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.6.0
2026-06-13T07:50:38.471090+00:00 Debian Oval Importer Affected by VCID-fh9y-kdy5-guau https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.6.0
2026-06-13T07:42:19.562010+00:00 Debian Oval Importer Affected by VCID-d6mc-ypf1-uqgs https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.6.0
2026-06-13T03:16:50.071939+00:00 Debian Oval Importer Affected by VCID-8ra7-fpsb-5ye8 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.6.0