json.net vulnerabilities

CVEs whose affected-version data names the json.net package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2024-21907High· 7.5PoC

2y ago

Newtonsoft.Json before version 13.0.1 is affected by a mishandling of exceptional conditions vulnerability

Newtonsoft.Json before version 13.0.1 is affected by a mishandling of exceptional conditions vulnerability. Crafted data that is passed to the JsonConvert.DeserializeObject method may trigger a StackOverflow exception resulting in denial…

▾ Midnightnewtonsoft · json.netEPSS 33%via NVD