Tag

json-smart

Safeguard articles tagged "json-smart" — guides, analysis, and best practices for software supply chain and application security.

1 article

Security

CVE-2023-1370: How a json-smart Recursion Bug Crashes Java Apps

CVE-2023-1370 lets an attacker crash any Java service that parses untrusted JSON with json-smart, using deeply nested arrays to exhaust the stack. Here is the fix.

Jun 9, 20254 min read