CVE-2023-39685: hson-java vulnerable to denial of service

September 1, 2023 (updated September 6, 2023)

An issue in hjson-java up to v3.0.0 allows attackers to cause a Denial of Service (DoS) via supplying a crafted JSON string.

References

github.com/advisories/GHSA-94w5-rf69-2h6c
github.com/hjson/hjson-java/commit/aff0b607929b4397d93dc0d029a56aeefb242602
github.com/hjson/hjson-java/issues/27
nvd.nist.gov/vuln/detail/CVE-2023-39685

Code Behaviors & Features

Detect and mitigate CVE-2023-39685 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →