DirectorySecurity Advisories
Sign In
Security Advisories

CVE-2023-1436

Published

Last updated

NVD

https://nvd.nist.gov/vuln/detail/CVE-2023-1436

CGA ID

CGA-j6p8-pcc9-34jq

Severity

7.5

High

CVSS V3

Description

An infinite recursion is triggered in Jettison when constructing a JSONArray from a Collection that contains a self-reference in one of its elements. This leads to a StackOverflowError exception being thrown.

References

  • https://images.chainguard.dev/security/CGA-j6p8-pcc9-34jq
  • https://github.com/advisories/GHSA-q6g2-g7f3-rr83
  • https://research.jfrog.com/vulnerabilities/jettison-json-array-dos-xray-427911/
  • https://security-tracker.debian.org/tracker/CVE-2023-1436

Affected packages

Safe Source for Open Source™
Media KitContact Us
© 2024 Chainguard. All Rights Reserved.
Private PolicyTerms of Use

Product

Chainguard Images

Why Chainguard

Container Image SecurityVulnerability RemediationCompliance and Risk MitigationSoftware Supply Chain SecurityAI/ML Security

Customers

Customer StoriesChainguard Love

Company

About UsOpen SourceCareersNewsroomLegal

Resources

Unchained BlogResearchEventsTrust CenterDocumentation