| शीर्षक | java-json-tools json-patch 1.13 Denial of Service via Unbounded Patch Operations and deepCopy |
|---|
| विवरण | Denial of Service via Unbounded Patch Operations and deepCopy in JsonPatch.apply()
JsonPatch.apply() accepts an unbounded number of patch operations with no limit, timeout, or backpressure mechanism. Each operation internally calls node.deepCopy(), resulting in O(N×M) resource consumption (N = number of operations, M = document size). A single HTTP request containing a large JSON Patch document can exhaust server CPU and memory.
more details at https://github.com/java-json-tools/json-patch/issues/167 |
|---|
| स्रोत | ⚠️ https://github.com/java-json-tools/json-patch/issues/167 |
|---|
| उपयोगकर्ता | York Shen - Yong Shen - PayPal Cyber Security Team (UID 100171) |
|---|
| सबमिशन | 29/07/2026 06:41 AM (1 महीना पहले) |
|---|
| संयम | 07/09/2026 07:33 AM (1 month later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 399510 [java-json-tools json-patch तक 1.13 Patch Operation JsonPatch.java JsonPatch.apply सेवा अस्वीकार] |
|---|
| अंक | 20 |
|---|