GHSA-ww3v-6xjf-jv28

Source

https://github.com/advisories/GHSA-ww3v-6xjf-jv28

Import Source

https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/06/GHSA-ww3v-6xjf-jv28/GHSA-ww3v-6xjf-jv28.json

JSON Data

https://api.osv.dev/v1/vulns/GHSA-ww3v-6xjf-jv28

Aliases

CVE-2018-18855

Published

2022-06-28T23:23:20Z

Modified

2023-11-08T04:00:06.221308Z

Summary

Uncontrolled Resource Consumption in Spray JSON

Details

Recursive decent parsers are susceptible too StackOverflowExceptions on too deeply nested structures as currently "open" parsing state is kept on the stack.

Database specific

{
    "nvd_published_at": null,
    "cwe_ids": [
        "CWE-400"
    ],
    "severity": "MODERATE",
    "github_reviewed": true,
    "github_reviewed_at": "2022-06-28T23:23:20Z"
}

References

Affected packages

Maven / io.spray:spray-json

Package

Name: io.spray:spray-json; View open source insights on deps.dev
Purl: pkg:maven/io.spray/spray-json

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.3.5