CVE-2023-34620
CVE-2023-34620
This page contains facts from public vulnerability sources. Check the original advisory before updating.
An issue was discovered hjson thru 3.0.0 allows attackers to cause a denial of service or other unspecified impacts via crafted object that uses cyclic dependencies.
CVSS 7.5 · High · EPSS 0.8% · Fix available
- Published
- Updated
Stack: php
Affected products and versions
n/a
- Versions
- n/a: Affected
No fix published
org.hjson:hjson Maven
- Versions
- 1.0.0
- 1.0.1
- 1.1.0
- 1.1.2
- 1.1.3
- 1.1.4
- 2.0.0
- 2.0.1
- 2.1.0
- 2.1.1
- 3.0.0
- Affected ranges
- ECOSYSTEM: < 3.0.1
Update to 3.0.1
laktak/hjson Packagist
- Versions
- 1.0.0
- v1.0.1
- v1.0.2
- v2.0.0
- v2.0.1
- v2.0.2
- v2.1.0
- v2.2.0
- v2.2.1
- v2.2.2
- Affected ranges
- ECOSYSTEM: < 2.3.0
Update to 2.3.0
github.com/hjson/hjson-go/v4 Go
- Affected ranges
- SEMVER: < 4.5.0
Update to 4.5.0