[GHSA-pq2g-wx69-c263] Netplex Json-smart Uncontrolled Recursion vulnerability

[yeikel]

Updates

• Affected products
• References

Comments
Document fixed version and pull request that fixed it

[JonathanLEvans]

Hi @yeikel, I can add the pull request and the fix commit to the advisory but 2.5.2 has not been released on GitHub or Maven Central so I can't update the fixed version.

[yeikel]

Hi @yeikel, I can add the pull request and the fix commit to the advisory but 2.5.2 has not been released on GitHub or Maven Central so I can't update the fixed version.

It should be released within the next few days. Can we merge it then?

Moved it to draft for now

[HTHou]

Hi @yeikel @JonathanLEvans, 2.5.2 has been released. I think it's ready to merge.
https://central.sonatype.com/artifact/net.minidev/json-smart/versions

[yeikel]

Hi @yeikel, I can add the pull request and the fix commit to the advisory but 2.5.2 has not been released on GitHub or Maven Central so I can't update the fixed version.

It should be ready now

[advisory-database]

Hi @yeikel! Thank you so much for contributing to the GitHub Advisory Database. This database is free, open, and accessible to all, and it's people like you who make it great. Thanks for choosing to help others. We hope you send in more contributions in the future!