Debian/cjson: low 2.9
cJSON 1.7.15 might allow a denial of service via a crafted JSON document such as {"a": true, "b": [ null,9999999999999999999999999999999999999999999999912345678901234567]}.
Action: Upgrade cjson to 1.7.15-1+deb12u3 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.7.15-1+deb12u3 | - |
Fixed versions
| 1.7.15-1+deb12u3 |
Sources
published · modified · JSON