Known Vulnerabilities for Json-java by Json-java Project
Listed below are 2 of the newest known vulnerabilities associated with "Json-java" by "Json-java Project".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-120367 json | Allocation of Resources Without Limits or Throttling vulnerability in Apache Axis2/Java. The JSON message builders, including... | Not Provided | 2026-11-09 | 2026-11-09 |
| CVE-2026-116479 json | A flaw has been found in a2aproject a2a-java up to 1.2.0.Final. This impacts the function getMessage of the component JSON-RP... | Not Provided | 2026-10-26 | 2026-10-27 |
| CVE-2026-112186 json | In Eclipse Kura versions 5.4.0 through 5.6.2, the Service Listing V1 REST API read the JSON body of every request into memory... | Not Provided | 2026-11-10 | 2026-11-10 |
| CVE-2026-112072 json | vault-java-driver, a Java client for HashiCorp Vault, parses Vault's JSON responses with a vendored minimal-json parser that ... | Not Provided | 2026-11-05 | 2026-11-05 |
| CVE-2026-111762 json | A2A Java SDK is the official Java SDK for the Agent2Agent (A2A) Protocol. Prior to 1.3.0.Final, RestHandler.parseRequestBody ... | Not Provided | 2026-10-20 | 2026-10-28 |
| CVE-2026-110974 json | The org.json parser in com.vaadin.external.google:android-json recurses once per nesting level with no depth limit: JSONToken... | Not Provided | 2026-10-22 | 2026-10-30 |
| CVE-2026-106121 json | The RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with RabbitMQ nodes. Prior... | Not Provided | 2026-10-06 | 2026-10-06 |
| CVE-2026-97848 json | A flaw was found in the token sanitization logic of Keycloak, an open source identity and access management solution. The iss... | Not Provided | 2026-11-06 | 2026-11-06 |
| CVE-2026-89407 json | NumberInput.looksLikeValidNumber() in FasterXML jackson-core pre-validates "stringified numbers" with two regular expressions... | Not Provided | 2026-09-22 | 2026-09-22 |
| CVE-2026-86513 json | A security flaw has been discovered in java-json-tools jackson-coreutils 2.0. This vulnerability affects the function TreePoi... | Not Provided | 2026-09-08 | 2026-09-08 |