Not analysed yet
We haven’t published our analysis of this Advisory yet. Once a person has reviewed it, this page will say what’s vulnerable, what has to be true for your app to be affected, and how to check.
Severity and exploitation
| Score | Rating | CVSS | Vector | Source |
|---|---|---|---|---|
| 7.5 | High | 3.1 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H | GitHub Advisory Database |
- CISA KEV Not listed.
- EPSS No score.
Timeline
- 31 Oct 2026, 15:13 UTC First seen by agentprime
- 31 Oct 2026, 15:13 UTC Confirmed by OSV
Sources
- GitHub Advisory Database: GHSA-rm7j-f5g5-27vv
- OSV: GHSA-rm7j-f5g5-27vv
- github.com/google/security-research/security/advisories/GHSA-4jq9-2xhw-jpx7
- nvd.nist.gov/vuln/detail/CVE-2023-5072
- github.com/stleary/JSON-java/issues/758
- github.com/stleary/JSON-java/issues/771
- github.com/stleary/JSON-java/pull/759
- github.com/stleary/JSON-java/commit/60662e2f8384d3449822a3a1179bfe8de67b55bb
- github.com/stleary/JSON-java
- security.netapp.com/advisory/ntap-20240621-0007
- www.openwall.com/lists/oss-security/2023/12/13/4