Vendor/product archive

haskell / aeson CVEs

Beta · best-effort

1 CVEs tagged to haskell / aeson — 0 Critical, 0 High, 1 Medium, 0 Low, 0 Unrated.

See this archive with more filters Back to haskell vendor archive

CVE-2022-3433

Published Oct 10, 2022

The aeson library is not safe to use to consume untrusted JSON input. A remote user could abuse this flaw to produce a hash collision in the underlying unordered-containers librar…

CVSS 6.5 · Medium

Vendor/product tagsBeta · best-effort

Showing 1-1 of 1 CVEsPage 1 of 1