https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 02:21:58 +0000 https://cve.radiocsirt.org/vuln/bdu:2023-05035 bdu:2023-05035 https://cve.radiocsirt.org/vuln/bdu:2023-05035 https://cve.radiocsirt.org/vuln/euvd-2026-193662 EUVD-2026-193662 https://cve.radiocsirt.org/vuln/euvd-2026-193662 https://cve.radiocsirt.org/vuln/fkie_cve-2023-33008 <p>Deserialization of Untrusted Data vulnerability in Apache Software Foundation Apache Johnzon.</p> <p>A malicious attacker can craft up some JSON input that uses large numbers (numbers such as 1e20000000) that Apache Johnzon will deserialize into BigDecimal and maybe use numbers too large which may result in a slow conversion (Denial of service risk). Apache Johnzon 1.2.21 mitigates this by setting a scale limit of 1000 (by default) to the BigDecimal.</p> <p>This issue affects Apache Johnzon: through 1.2.20.</p> <p>Deserialization of Untrusted Data vulnerability in Apache Software Foundation Apache Johnzon.</p> <p>A malicious attacker can craft up some JSON input that uses large numbers (numbers such as 1e20000000) that Apache Johnzon will deserialize into BigDecimal and maybe use numbers too large which may result in a slow conversion (Denial of service risk). Apache Johnzon 1.2.21 mitigates this by setting a scale limit of 1000 (by default) to the BigDecimal.</p> <p>This issue affects Apache Johnzon: through 1.2.20.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2023-33008 https://cve.radiocsirt.org/vuln/ghsa-crqg-jrpj-fc84 <p><strong>Affected:</strong> Maven: org.apache.johnzon:johnzon-mapper</p> <p>A malicious attacker can craft up some JSON input that uses large numbers (numbers such as 1e20000000) that Apache Johnzon will deserialize into BigDecimal and maybe use numbers too large which may result in a slow conversion (Denial of service risk). Apache Johnzon 1.2.21 mitigates this by setting a scale limit of 1000 (by default) to the BigDecimal.</p> <p>This issue affects Apache Johnzon through 1.2.20.</p> <p><strong>Affected:</strong> Maven: org.apache.johnzon:johnzon-mapper</p> <p>A malicious attacker can craft up some JSON input that uses large numbers (numbers such as 1e20000000) that Apache Johnzon will deserialize into BigDecimal and maybe use numbers too large which may result in a slow conversion (Denial of service risk). Apache Johnzon 1.2.21 mitigates this by setting a scale limit of 1000 (by default) to the BigDecimal.</p> <p>This issue affects Apache Johnzon through 1.2.20.</p> https://cve.radiocsirt.org/vuln/ghsa-crqg-jrpj-fc84 https://cve.radiocsirt.org/vuln/gsd-2023-33008 gsd-2023-33008 https://cve.radiocsirt.org/vuln/gsd-2023-33008 https://cve.radiocsirt.org/vuln/rhsa-2023:5441 <p>batik: Server-Side Request Forgery vulnerability batik: Server-Side Request Forgery vulnerability apache-ivy: XML External Entity vulnerability jetty-server: OutOfMemoryError for large multipart without filename read via request.getParameter() jetty-server: Cookie parsing of quoted values can exfiltrate values from other cookies apache-johnzon: Prevent inefficient internal conversion from BigDecimal at large scale netty: SniHandler 16MB allocation leads to OOM jetty: Improper validation of HTTP/1 content-length</p> <p>batik: Server-Side Request Forgery vulnerability batik: Server-Side Request Forgery vulnerability apache-ivy: XML External Entity vulnerability jetty-server: OutOfMemoryError for large multipart without filename read via request.getParameter() jetty-server: Cookie parsing of quoted values can exfiltrate values from other cookies apache-johnzon: Prevent inefficient internal conversion from BigDecimal at large scale netty: SniHandler 16MB allocation leads to OOM jetty: Improper validation of HTTP/1 content-length</p> https://cve.radiocsirt.org/vuln/rhsa-2023:5441 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-2583 <p>Ein lokaler Angreifer kann mehrere Schwachstellen in Red Hat JBoss A-MQ ausnutzen, um Informationen offenzulegen, Dateien zu manipulieren oder einen Denial of Service Zustand herbeizuführen.</p> <p>Ein lokaler Angreifer kann mehrere Schwachstellen in Red Hat JBoss A-MQ ausnutzen, um Informationen offenzulegen, Dateien zu manipulieren oder einen Denial of Service Zustand herbeizuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2023-2583