spray/spray-json · Security
Uncontrolled Resource Consumption in Spray JSON
- GHSA ID
- GHSA-ww3v-6xjf-jv28
- CVE ID
- CVE-2018-18855
- Severity
- medium
- Published
- Updated
Description
Recursive decent parsers are susceptible too StackOverflowExceptions on too deeply nested structures as currently "open" parsing state is kept on the stack.
CWEs
- CWE-400 · Uncontrolled Resource Consumption