MEDIUM 5.3
GHSA-wwcp-26wc-3fxm
JSON-lib mishandles an unbalanced comment string
빠른 조치
GHSA-wwcp-26wc-3fxm — org.kordamp.json:json-lib-core: 아래 명령으로 수정 버전으로 올리세요.
# pom.xml: bump <version>3.1.0</version> for org.kordamp.json:json-lib-core 상세
util/JSONTokener.java in JSON-lib before 3.1.0 mishandles an unbalanced comment string.
이 버전이 영향받나요?
사용 중인 패키지 버전을 입력하면 즉시 평가합니다.
영향 패키지
Maven / org.kordamp.json:json-lib-core
최초 영향 버전:
0 수정 버전: 3.1.0 수정
# pom.xml: bump <version>3.1.0</version> for org.kordamp.json:json-lib-core Maven / net.sf.json-lib:json-lib
최초 영향 버전:
0 No fixed version published yet for net.sf.json-lib:json-lib (maven). Pin to a known-safe version or switch to an alternative.
참고
- https://nvd.nist.gov/vuln/detail/CVE-2024-47855 [ADVISORY]
- https://github.com/kordamp/json-lib/commit/a0c4a0eae277130e22979cf307c95dec4005a78e [WEB]
- https://github.com/kordamp/json-lib [PACKAGE]
- https://github.com/kordamp/json-lib/blob/35a1f2aa22bac260438c0cf2399549311b5a21aa/pom.xml [WEB]
- https://github.com/kordamp/json-lib/compare/v3.0.3...v3.1.0 [WEB]
- https://sourceforge.net/projects/json-lib [WEB]