VDB
KO
MEDIUM 5.3

GHSA-wwcp-26wc-3fxm

JSON-lib mishandles an unbalanced comment string

Quick fix

GHSA-wwcp-26wc-3fxm — org.kordamp.json:json-lib-core: upgrade to the fixed version with the command below. 

# pom.xml: bump <version>3.1.0</version> for org.kordamp.json:json-lib-core

Details

util/JSONTokener.java in JSON-lib before 3.1.0 mishandles an unbalanced comment string.

Are you affected?

Enter the version of the package you're using.

Affected packages

Maven / org.kordamp.json:json-lib-core
Introduced in: 0 Fixed in: 3.1.0
Fix # pom.xml: bump <version>3.1.0</version> for org.kordamp.json:json-lib-core
Maven / net.sf.json-lib:json-lib
Introduced in: 0

No fixed version published yet for net.sf.json-lib:json-lib (maven). Pin to a known-safe version or switch to an alternative.

References