VYPR

Spray JSON

by Lightbend

CVEs (2)

  • CVE-2018-18854HigOct 31, 2018
    risk 0.49cvss 7.5epss 0.02

    Lightbend Spray spray-json through 1.3.4 allows remote attackers to cause a denial of service (resource consumption) because of Algorithmic Complexity during the parsing of many JSON object fields (with keys that have the same hash code).

  • CVE-2018-18853HigOct 31, 2018
    risk 0.49cvss 7.5epss 0.02

    Lightbend Spray spray-json through 1.3.4 allows remote attackers to cause a denial of service (resource consumption) because of Algorithmic Complexity during the parsing of a field composed of many decimal digits.