tocsin

Debian/cjson: low 2.9

cJSON 1.7.15 might allow a denial of service via a crafted JSON document such as {"a": true, "b": [ null,9999999999999999999999999999999999999999999999912345678901234567]}.

Action: Upgrade cjson to 1.7.18-3.1 or later.

Affected

introducedfixedlast affected
01.7.18-3.1-

Fixed versions

1.7.18-3.1

Sources

published · modified · JSON