Threats tagged 'ghsa-vr64-r9qj-h27f'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
High	7.5	EPSS 1.5%	CVE-2024-22871Org.clojure:clojure: Reading specially crafted serializable objects from an untrusted source may cause an infinite High7.5EPSS 1.5%2024-02-29GCVE DatabaseCVE-2024-22871 A vulnerability in org.clojure:clojure allows denial of service when deserializing specially crafted serialized objects containing infinite sequences. The affected classes Cycle, Repeat, and Iterate do not override hashCode(), causing an infinite loop during deserialization of HashMap keys. This affects versions from 1.7.0 up to but not including 1.11.2 and 1.12.0-alpha1 up to but not including 1.12.0-alpha9. A fix is available in versions 1.11.2 and 1.12.0-alpha9. EPSS 1.5%Report on CVE-2024-22871 Vulnerability CWE-502 #ghsa-vr64-r9qj-h27f #maven	GCVE Database	2024-02-29

Page 1 of 1