MEDIUM5.3
GHSA-wwcp-26wc-3fxm
JSON-lib mishandles an unbalanced comment string
Quick fix
GHSA-wwcp-26wc-3fxm — org.kordamp.json:json-lib-core: upgrade to the fixed version with the command below.
# pom.xml: bump <version>3.1.0</version> for org.kordamp.json:json-lib-coreDetails
util/JSONTokener.java in JSON-lib before 3.1.0 mishandles an unbalanced comment string.
Are you affected?
Enter the version of the package you're using.
Affected packages
Maven/org.kordamp.json:json-lib-core
Introduced in:
0Fixed in: 3.1.0Fix
# pom.xml: bump <version>3.1.0</version> for org.kordamp.json:json-lib-coreMaven/net.sf.json-lib:json-lib
Introduced in:
0No fixed version published yet for net.sf.json-lib:json-lib (maven). Pin to a known-safe version or switch to an alternative.
References
- https://nvd.nist.gov/vuln/detail/CVE-2024-47855[ADVISORY]
- https://github.com/kordamp/json-lib/commit/a0c4a0eae277130e22979cf307c95dec4005a78e[WEB]
- https://github.com/kordamp/json-lib[PACKAGE]
- https://github.com/kordamp/json-lib/blob/35a1f2aa22bac260438c0cf2399549311b5a21aa/pom.xml[WEB]
- https://github.com/kordamp/json-lib/compare/v3.0.3...v3.1.0[WEB]
- https://sourceforge.net/projects/json-lib[WEB]