Not analysed yet
We haven’t published our analysis of this Advisory yet. Once a person has reviewed it, this page will say what’s vulnerable, what has to be true for your app to be affected, and how to check.
Severity and exploitation
| Score | Rating | CVSS | Vector | Source |
|---|---|---|---|---|
| 7.5 | High | 3.1 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H | GitHub Advisory Database |
- CISA KEV Not listed.
- EPSS No score.
Timeline
- 31 Oct 2026, 15:23 UTC First seen by agentprime
- 31 Oct 2026, 15:23 UTC Confirmed by OSV
Sources
- GitHub Advisory Database: GHSA-8rfx-6mr3-5jh3
- OSV: GHSA-8rfx-6mr3-5jh3
- nvd.nist.gov/vuln/detail/CVE-2024-21907
- github.com/JamesNK/Newtonsoft.Json/issues/2457
- github.com/JamesNK/Newtonsoft.Json/pull/2462
- github.com/JamesNK/Newtonsoft.Json/commit/7e77bbe1beccceac4fc7b174b53abfefac278b66
- alephsecurity.com/2018/10/22/StackOverflowException
- alephsecurity.com/vulns/aleph-2018004
- github.com/advisories/GHSA-5crp-9r3c-p9vr
- security.snyk.io/vuln/SNYK-DOTNET-NEWTONSOFTJSON-2774678
- vulncheck.com/advisories/vc-advisory-GHSA-5crp-9r3c-p9vr