VDB
Sign up
MEDIUM5.9

GHSA-v528-7hrm-frqp

Improper Check for Unusual or Exceptional Conditions in json-smart

Quick fix

GHSA-v528-7hrm-frqp — net.minidev:json-smart: upgrade to the fixed version with the command below.

# pom.xml: bump <version>1.3.2</version> for net.minidev:json-smart

Details

An issue was discovered in netplex json-smart-v1 through 2015-10-23 and json-smart-v2 through 2.4. An exception is thrown from a function, but it is not caught, as demonstrated by NumberFormatException. When it is not caught, it may cause programs using the library to crash or expose sensitive information.

Are you affected?

Enter the version of the package you're using.

Affected packages

Maven/net.minidev:json-smart
Introduced in: 0Fixed in: 1.3.2
Fix# pom.xml: bump <version>1.3.2</version> for net.minidev:json-smart
Maven/net.minidev:json-smart
Introduced in: 2.4.0Fixed in: 2.4.1
Fix# pom.xml: bump <version>2.4.1</version> for net.minidev:json-smart
Maven/net.minidev:json-smart-mini
Introduced in: 0Fixed in: 1.3.2
Fix# pom.xml: bump <version>1.3.2</version> for net.minidev:json-smart-mini
Maven/net.minidev:json-smart
Introduced in: 2.0.0Fixed in: 2.3.1
Fix# pom.xml: bump <version>2.3.1</version> for net.minidev:json-smart

References