Jansson Project

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Jansson Project records in CISA KEV

No Jansson Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Jansson 3 records MEDIUM

Records

3 records in Jansson · all components

TI-2016-03801 CVE-2016-4425 · GHSA-rf62-m3fm-w623

Jansson 2.7 and earlier allows context-dependent attackers to cause a denial of service…

MEDIUM 62

Jansson 2.7 and earlier allows context-dependent attackers to cause a denial of service (deep recursion, stack consumption, and crash) via crafted JSON data.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.01894 Published 2016-05-17 No fix listed CWE-674

TI-2020-18608 CVE-2020-36325 · GHSA-6p5j-2wf2-jfc6

An issue was discovered in Jansson through 2.13.1.

LOW 36

An issue was discovered in Jansson through 2.13.1.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01718 Published 2021-04-26 No fix listed CWE-125

TI-2013-05357 CVE-2013-6401 · GHSA-qjq9-rwgx-jjhc

Jansson, possibly 2.4 and earlier, does not restrict the ability to trigger hash…

LOW 27

Jansson, possibly 2.4 and earlier, does not restrict the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service (CPU consumption) via a crafted JSON document…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.02007 Published 2014-03-20 No fix listed CWE-310

Open these records in search →

Critical	0
High	1
Medium	2
Low	0
No CVSS	0