Vulnerabilities (CVE)

Filtered by vendor Janino Project Subscribe
Filtered by product Janino
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2023-33546 1 Janino Project 1 Janino 2024-11-21 N/A 5.5 MEDIUM
janino 3.1.9 and earlier are subject to denial of service (DOS) attacks when using the expression evaluator.guess parameter name method. If the parser runs on user-supplied input, an attacker could supply content that causes the parser to crash due to a stack overflow.