CVE-2022-3433CWE-328

The aeson library is not safe to use to consume untrusted JSON input

published October 10, 2022

CVSS
—
EPSS
1%
Percentile
57.2
In the wild
Unconfirmed
What it is

The aeson library is not safe to use to consume untrusted JSON input. A remote user could abuse this flaw to produce a hash collision in the underlying unordered-containers library by sending specially crafted JSON data, resulting in a denial of service.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00833 · 57.2th percentile
Weakness
CWE-328 · Use of Weak Hash
Published
2022-10-10T00:00Z
EPSS history
Timeline
  • 10 OCT 00:00Z
    The aeson library is not safe to use to consume untrusted JSON input
    cvelistv5