CVE Tools
Track your stack

Cn.hutool:hutool-json

6 CVEs tracked. None of them is in CISA KEV.

This hub aggregates every CVE we track for Cn.hutool:hutool-json, a product in the oss libraries space. Use it to gauge the current risk picture and drill into individual advisories.

Cn.hutool:hutool-json CVEs per month

Nov 2024 to Oct 2026. Point at a month, or focus the strip and use the arrow keys.
Cn.hutool:hutool-json CVEs per month
MonthCVEs
2024-110
2024-120
2025-010
2025-020
2025-030
2025-040
2025-050
2025-060
2025-070
2025-080
2025-090
2025-100
2025-110
2025-120
2026-010
2026-020
2026-030
2026-040
2026-050
2026-060
2026-070
2026-080
2026-090
2026-100

Severity

How the 6 CVEs score on CVSS. Severity is not exploitation: KEV is counted above.

  • Critical233%
  • High467%

Latest CVEs

The 6 most recently published vulnerabilities affecting Cn.hutool:hutool-json.

  1. CVE-2023-42276hutool v5.8.21 was discovered to contain a buffer overflow via the component jsonArray.9.8
  2. CVE-2023-42277hutool v5.8.21 was discovered to contain a buffer overflow via the component jsonObject.putByPath.9.8
  3. CVE-2023-42278hutool v5.8.21 was discovered to contain a buffer overflow via the component JSONUtil.parse().7.5
  4. CVE-2022-45688A stack overflow in the XML.toJSONObject component of hutool-json v5.8.10 allows attackers to cause a Denial of Service (DoS) via crafted JSON or XML data.7.5
  5. CVE-2022-45690A stack overflow in the org.json.JSONTokener.nextValue::JSONTokener.java component of hutool-json v5.8.10 allows attackers to cause a Denial of Service (DoS) via crafted JSON or XML data.7.5
  6. CVE-2022-45689hutool-json v5.8.10 was discovered to contain an out of memory error.7.5

Product grouping is registry-driven, with AI assist and human review. How it works