https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 29 Sep 2026 00:55:18 +0000 https://vulnerability.circl.lu/vuln/cve-2022-40149 <p><strong>Affected:</strong> Jettison</p> <p>Those using Jettison to parse untrusted XML or JSON data may be vulnerable to Denial of Service attacks (DOS). If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stackoverflow. This effect may support a denial of service attack.</p> <p><strong>Affected:</strong> Jettison</p> <p>Those using Jettison to parse untrusted XML or JSON data may be vulnerable to Denial of Service attacks (DOS). If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stackoverflow. This effect may support a denial of service attack.</p> https://vulnerability.circl.lu/vuln/cve-2022-40149 https://vulnerability.circl.lu/vuln/usn-6177-1 <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: libjettison-java, Ubuntu:Pro:18.04:LTS: libjettison-java, Ubuntu:20.04:LTS: libjettison-java, Ubuntu:22.04:LTS: libjettison-java</p> <p>It was discovered that Jettison incorrectly handled certain inputs. If a user or an automated system were tricked into opening a specially crafted input file, a remote attacker could possibly use this issue to cause a denial of service.</p> <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: libjettison-java, Ubuntu:Pro:18.04:LTS: libjettison-java, Ubuntu:20.04:LTS: libjettison-java, Ubuntu:22.04:LTS: libjettison-java</p> <p>It was discovered that Jettison incorrectly handled certain inputs. If a user or an automated system were tricked into opening a specially crafted input file, a remote attacker could possibly use this issue to cause a denial of service.</p> https://vulnerability.circl.lu/vuln/usn-6177-1