CVE-2022-40151
1 advisory.
Maven/com.thoughtworks.xstream:xstream CVE-2022-40151: high 7.5
XStream can cause a Denial of Service by injecting deeply nested objects raising a stack overflow
Action: Upgrade com.thoughtworks.xstream:xstream to 1.4.20 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.4.20 | - |
Fixed versions
| 1.4.20 |
Sources
- osv: GHSA-f8cc-g7j8-xxpm
- https://github.com/x-stream/xstream/security/advisories/GHSA-f8cc-g7j8-xxpm
- https://nvd.nist.gov/vuln/detail/CVE-2022-40151
- https://github.com/x-stream/xstream/issues/304
- https://github.com/x-stream/xstream/issues/314
- https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47367
- https://github.com/x-stream/xstream
- https://x-stream.github.io/CVE-2022-40151.html
CVE-2022-40151 · published · modified · JSON