GMS-2023-1111: Uncontrolled Resource Consumption

June 13, 2023

Decoding of invalid/partial JSON data such as [ causes the JVM to crash with an java.lang.StackOverflowError exception.

References

github.com/stleary/JSON-java/issues/372
github.com/stleary/JSON-java/pull/373

Detect and mitigate GMS-2023-1111 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Learn more about Dependency Scanning →