GHSA-66rc-vg9f-48m7

Source

https://github.com/advisories/GHSA-66rc-vg9f-48m7

Import Source

https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2025/04/GHSA-66rc-vg9f-48m7/GHSA-66rc-vg9f-48m7.json

JSON Data

https://api.osv.dev/v1/vulns/GHSA-66rc-vg9f-48m7

Aliases

CVE-2025-3588

Published

2025-04-14T21:32:24Z

Modified

2025-04-14T23:42:18.763952Z

Severity

5.3 (Medium) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L CVSS Calculator
4.8 (Medium) CVSS_V4 - CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N CVSS Calculator

Summary

jsonschema2pojo has Improper Restriction of Operations within the Bounds of a Memory Buffer

Details

A vulnerability, which was classified as problematic, has been found in joelittlejohn jsonschema2pojo 1.2.2. This issue affects the function apply of the file org/jsonschema2pojo/rules/SchemaRule.java of the component JSON File Handler. The manipulation leads to stack-based buffer overflow. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

Database specific

{
    "cwe_ids": [
        "CWE-119"
    ],
    "github_reviewed": true,
    "github_reviewed_at": "2025-04-14T22:59:04Z",
    "nvd_published_at": "2025-04-14T21:15:18Z",
    "severity": "MODERATE"
}

References

Affected packages

Maven / org.jsonschema2pojo:jsonschema2pojo-core

Package

Name: org.jsonschema2pojo:jsonschema2pojo-core; View open source insights on deps.dev
Purl: pkg:maven/org.jsonschema2pojo/jsonschema2pojo-core

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Last affected

1.2.2

Affected versions

0.*

0.4.0

0.4.1

0.4.2

0.4.3

0.4.4

0.4.5

0.4.6

0.4.7

0.4.8

0.4.9

0.4.10

0.4.11

0.4.12

0.4.13

0.4.14

0.4.15

0.4.16

0.4.17

0.4.18

0.4.19

0.4.20

0.4.21-beta-1

0.4.21

0.4.22

0.4.23

0.4.24

0.4.25

0.4.26

0.4.27

0.4.28

0.4.29

0.4.30

0.4.31

0.4.32

0.4.33

0.4.34

0.4.35

0.4.36

0.4.37

0.5.0

0.5.1

1.*

1.0.0-alpha1

1.0.0-alpha2

1.0.0-alpha3

1.0.0-alpha4

1.0.0-beta1

1.0.0

1.0.1

1.0.2

1.1.0

1.1.1

1.1.2

1.1.3

1.2.0

1.2.1

1.2.2

Database specific

source

"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2025/04/GHSA-66rc-vg9f-48m7/GHSA-66rc-vg9f-48m7.json"