cn.hutool:hutool-json (Maven) — known CVEs & security advisories

Known CVE vulnerabilities and GitHub Security Advisories affecting the Maven package cn.hutool:hutool-json, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.

CVEs (6)

• CVE-2023-42276 — CVSS 9.8 (critical): hutool v5.8.21 was discovered to contain a buffer overflow via the component jsonArray.
• CVE-2023-42277 — CVSS 9.8 (critical): hutool v5.8.21 was discovered to contain a buffer overflow via the component jsonObject.putByPath.
• CVE-2022-45688 — CVSS 7.5 (high): A stack overflow in the XML.toJSONObject component of hutool-json v5.8.10 allows attackers to cause a Denial of Service (DoS) via crafted…
• CVE-2022-45689 — CVSS 7.5 (high): hutool-json v5.8.10 was discovered to contain an out of memory error.
• CVE-2022-45690 — CVSS 7.5 (high): A stack overflow in the org.json.JSONTokener.nextValue::JSONTokener.java component of hutool-json v5.8.10 allows attackers to cause a…
• CVE-2023-42278 — CVSS 7.5 (high): hutool v5.8.21 was discovered to contain a buffer overflow via the component JSONUtil.parse().