hutool-json v5.8.10 was discovered to contain an out of memory error.
CVSS Score
7.5
EPSS Score
0.001
Published
2022-12-13
A stack overflow in the org.json.JSONTokener.nextValue::JSONTokener.java component of hutool-json v5.8.10 allows attackers to cause a Denial of Service (DoS) via crafted JSON or XML data.
CVSS Score
7.5
EPSS Score
0.002
Published
2022-12-13
Hutool v5.7.18's HttpRequest was discovered to ignore all TLS/SSL certificate validation.
CVSS Score
9.8
EPSS Score
0.006
Published
2022-02-16
The unzip function in ZipUtil.java in Hutool before 4.1.12 allows remote attackers to overwrite arbitrary files via directory traversal sequences in a filename within a ZIP archive.
CVSS Score
7.5
EPSS Score
0.005
Published
2018-09-21
Page 2