Vulnerabilities

TI-2020-18608 CVE-2020-36325 · GHSA-6p5j-2wf2-jfc6

An issue was discovered in Jansson through 2.13.1.

LOW 36

An issue was discovered in Jansson through 2.13.1.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01718 Published 2021-04-26 No fix listed CWE-125

TI-2016-03801 CVE-2016-4425 · GHSA-rf62-m3fm-w623

Jansson 2.7 and earlier allows context-dependent attackers to cause a denial of service…

MEDIUM 62

Jansson 2.7 and earlier allows context-dependent attackers to cause a denial of service (deep recursion, stack consumption, and crash) via crafted JSON data.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.01894 Published 2016-05-17 No fix listed CWE-674

TI-2013-05357 CVE-2013-6401 · GHSA-qjq9-rwgx-jjhc

Jansson, possibly 2.4 and earlier, does not restrict the ability to trigger hash…

LOW 27

Jansson, possibly 2.4 and earlier, does not restrict the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service (CPU consumption) via a crafted JSON document…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.02007 Published 2014-03-20 No fix listed CWE-310

Vulnerabilities

Filters

An issue was discovered in Jansson through 2.13.1.

Jansson 2.7 and earlier allows context-dependent attackers to cause a denial of service…

Jansson, possibly 2.4 and earlier, does not restrict the ability to trigger hash…