A security flaw has been discovered in java-json-tools jackson-coreutils 2.0, affecting the function TreePointer.tokensFromInput of the file src/main/java/com/github/fge/jackson/jsonpointer/TreePointer.java of the component JSON Pointer parser. The manipulation results in allocation of resources. The attack can be executed remotely. This vulnerability has been publicly disclosed and may be used for attack [truncated]
A vulnerability was found in java-json-tools jackson-coreutils 2.0, affecting the function BigDecimal.toPlainString in JacksonUtils.java, which could lead to resource consumption when manipulated. The attack may be initiated remotely, and the exploit has been made public. However, the project has not responded yet. This issue requires immediate attention from defenders of systems using jackson-coreutils 2 [truncated]
A vulnerability was found in java-json-tools jackson-coreutils 2.0, affecting the function JsonLoader.fromURL of the file src/main/java/com/github/fge/jackson/JsonLoader.java, which is responsible for URL validation. This issue allows for server-side request forgery and can be exploited remotely. The exploit has been made public, and although the project was informed early through an issue report, there h [truncated]
A vulnerability was found in the java-json-tools json-patch library up to version 1.13. The vulnerability affects the JsonPatch.apply function in the JsonPatch.java file, which is part of the Patch Operation Handler component. This vulnerability can lead to resource consumption and can be exploited remotely. The exploit has been publicly disclosed, and although the project was informed early through an is [truncated]
A flaw in java-json-tools json-patch up to 1.13 can lead to a stack-based buffer overflow when executing a manipulation via JsonMergePatch.fromJson in JsonMergePatchDeserializer.java. The attack may be performed remotely. The exploit has been published and may be used. However, the project was informed early but has not responded yet. The vulnerability affects systems using java-json-tools json-patch, par [truncated]
