Deserialization of Untrusted Data in com.jsoniter:jsoniter
Withdrawnwas withdrawn by its CNA. Further investigation showed that it was not a security issue.Original DescriptionAll versions of package com.jsoniter:jsoniter are vulnerable to Deserialization of Untrusted Data via malicious JSON strings. This may lead to a Denial of Service, and in certain cases, code execution.