stleary

Records4All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high3CVSS 7.0–8.9

Exploited now

stleary records in CISA KEV

No stleary vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Json-java 3 records HIGH

Records

4 records

TI-2022-22552 CVE-2022-45690 · GHSA-whgh-g24c-3j5q

A stack overflow in the org.json.JSONTokener.nextValue::JSONTokener.java component of…

HIGH 72

A stack overflow in the org.json.JSONTokener.nextValue::JSONTokener.java component of hutool-json v5.8.10 allows attackers to cause a Denial of Service (DoS) via crafted JSON or XML data.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01006 Published 2022-12-13 Fixed in 5.8.11 CWE-787

TI-2022-22550 CVE-2022-45688 · GHSA-3vqj-43w4-2q58

A stack overflow in the XML.toJSONObject component of hutool-json v5.8.10 allows…

HIGH 72

A stack overflow in the XML.toJSONObject component of hutool-json v5.8.10 allows attackers to cause a Denial of Service (DoS) via crafted JSON or XML data.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01263 Published 2022-12-13 Fixed in 5.8.25, 20230227 CWE-787

TI-2023-04667 CVE-2023-5072 · GHSA-4jq9-2xhw-jpx7

DoS Vulnerability in JSON-Java

MEDIUM 42

Denial of Service in JSON-Java versions up to and including 20230618.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01741 Published 2023-10-12 Partial fix · 20231013 CWE-770

TI-2026-86109 CVE-2026-59171

Unbounded numeric parsing in JSON-java enables denial of service

LOW 27

JSON-java is a reference implementation of a JSON package in Java.

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.00552 Published 2026-11-06 Fixed in 20260719 CWE-400

Open these records in search →

Critical	0
High	3
Medium	1
Low	0
No CVSS	0