Threats affecting pkg:maven/io.helidon/helidon-json

A vulnerability in the JSON component of Oracle Fusion Middleware's Helidon product affects versions 4.0.0 through 4.5.4. This vulnerability allows an unauthenticated attacker with network access via HTTP to cause a partial denial of service (DoS) condition. The CVSS 3.1 base score is 5.3, indicating a medium severity with impact limited to availability. Oracle has released security patches addressing this vulnerability as part of their September 2026 Critical Security Patch Update.