Most recent entries from all

bdu:2025-13819

EUVD-2026-199998

fkie_cve-2024-47855

util/JSONTokener.java in JSON-lib before 3.1.0 mishandles an unbalanced comment string.

GHSA-wwcp-26wc-3fxm — JSON-lib mishandles an unbalanced comment string

Affected: Maven: org.kordamp.json:json-lib-core, Maven: net.sf.json-lib:json-lib

util/JSONTokener.java in JSON-lib before 3.1.0 mishandles an unbalanced comment string.

OESA-2024-2228 — json-lib security update

Affected: openEuler:22.03-LTS-SP3: json-lib, openEuler:20.03-LTS-SP4: json-lib, openEuler:22.03-LTS-SP1: json-lib, openEuler:24.03-LTS: json-lib, openEuler:22.03-LTS-SP4: json-lib

JSON-lib is a java library for transforming beans, maps, collections, java arrays and XML to JSON and back again to beans and DynaBeans. Security Fix(es): util/JSONTokener.java in JSON-lib before 3.1.0 mishandles an unbalanced comment string.(CVE-2024-47855)

RHSA-2025:2218 — Red Hat Security Advisory: Red Hat Product OCP Tools 4.17 Openshift Jenkins security update

com.thoughtworks.xstream: XStream is vulnerable to a Denial of Service attack due to stack overflow from a manipulated binary input stream json-lib: Mishandling of an unbalanced comment string in json-lib jenkins-plugin/script-security: Jenkins Script Security Plugin File Disclosure Vulnerability jenkins-plugin/workflow-cps: Lack of Approval Check for Rebuilt Jenkins Pipelines jenkins-plugin/pipeline-model-definition: Jenkins Pipeline Declarative Plugin Allows Restart of Builds with Unapproved Jenkinsfile

SUSE-SU-2024:3543-1 — Security update for json-lib

Security update for json-lib

UBUNTU-CVE-2024-47855

Affected: Ubuntu:16.04:LTS: libjson-java, Ubuntu:18.04:LTS: libjson-java, Ubuntu:20.04:LTS: libjson-java, Ubuntu:22.04:LTS: libjson-java, Ubuntu:24.04:LTS: libjson-java, Ubuntu:25.10: libjson-java, Ubuntu:26.04:LTS: libjson-java

util/JSONTokener.java in JSON-lib before 3.1.0 mishandles an unbalanced comment string.

WID-SEC-W-2024-3563 — Jenkins: Mehrere Schwachstellen

Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Jenkins ausnutzen, um Sicherheitsmaßnahmen zu umgehen, einen Cross-Site-Scripting-Angriff durchzuführen und einen Denial-of-Service-Zustand zu erzeugen.