From c4db76d4d44a9f23adf4f5f25960bcda0d324d39 Mon Sep 17 00:00:00 2001 From: Kenny Moens Date: Thu, 16 Apr 2026 14:04:06 +0200 Subject: [PATCH] Improve GHSA-wwcp-26wc-3fxm --- .../GHSA-wwcp-26wc-3fxm.json | 25 +++++++++++++++---- 1 file changed, 20 insertions(+), 5 deletions(-) diff --git a/advisories/github-reviewed/2024/10/GHSA-wwcp-26wc-3fxm/GHSA-wwcp-26wc-3fxm.json b/advisories/github-reviewed/2024/10/GHSA-wwcp-26wc-3fxm/GHSA-wwcp-26wc-3fxm.json index cbc29415d267f..5ff409b6d999d 100644 --- a/advisories/github-reviewed/2024/10/GHSA-wwcp-26wc-3fxm/GHSA-wwcp-26wc-3fxm.json +++ b/advisories/github-reviewed/2024/10/GHSA-wwcp-26wc-3fxm/GHSA-wwcp-26wc-3fxm.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-wwcp-26wc-3fxm", - "modified": "2024-11-07T21:43:53Z", + "modified": "2024-11-07T21:43:55Z", "published": "2024-10-04T06:30:45Z", "aliases": [ "CVE-2024-47855" @@ -9,10 +9,6 @@ "summary": "JSON-lib mishandles an unbalanced comment string", "details": "util/JSONTokener.java in JSON-lib before 3.1.0 mishandles an unbalanced comment string.", "severity": [ - { - "type": "CVSS_V3", - "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" - }, { "type": "CVSS_V4", "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N" @@ -37,6 +33,25 @@ ] } ] + }, + { + "package": { + "ecosystem": "Maven", + "name": "net.sf.json-lib:json-lib" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "0" + }, + { + "last_affected": "2.4" + } + ] + } + ] } ], "references": [