org.json:json (Maven) — known CVEs & security advisories

Known CVE vulnerabilities and GitHub Security Advisories affecting the Maven package org.json:json, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.

CVEs (2)

• CVE-2022-45688 — CVSS 7.5 (high): A stack overflow in the XML.toJSONObject component of hutool-json v5.8.10 allows attackers to cause a Denial of Service (DoS) via crafted…
• CVE-2023-5072 — CVSS 7.5 (high): Denial of Service in JSON-Java versions up to and including 20230618. A bug in the parser means that an input string of modest size can…