Skip to content

Conversation

@arjantijms
Copy link
Contributor

Fixes jettison-json/jettison#60

`If the value inside a Collection is itself, using it with JSONArray causes a StackOverflowError which may lead to DoS`
@arjantijms arjantijms added the component upgrade A component dependency has been upgraded label Mar 21, 2023
@arjantijms arjantijms added this to the 7.0.3 milestone Mar 21, 2023
@arjantijms arjantijms self-assigned this Mar 21, 2023
@dmatej dmatej merged commit 7d42504 into master Mar 21, 2023
@dmatej dmatej deleted the jettison-154 branch March 21, 2023 20:13
@dmatej dmatej added the security fix The change (component upgrade or gf code) concerns a CVE label Mar 21, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

component upgrade A component dependency has been upgraded security fix The change (component upgrade or gf code) concerns a CVE

Projects

None yet

Development

Successfully merging this pull request may close these issues.

If the value inside a Collection is itself, using it with JSONArray causes a StackOverflowError which may lead to DoS

3 participants