Threats tagged 'ghsa-hfq9-hggm-c56q'

XStream versions prior to 1.4.21 are vulnerable to a denial of service (DoS) attack caused by a stack overflow when processing manipulated input streams using the BinaryStreamDriver. This vulnerability allows a remote attacker to crash the application by triggering a stack overflow error. The issue is fixed in version 1.4.21, which detects the manipulation and raises an InputManipulationException instead of crashing. Until patched, the only workaround is to catch the StackOverflowError in client code using the BinaryStreamDriver configuration.