-
CVSS Score
-| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| net.sf.sojo:sojo | maven | <= 1.1.1 |
The stack trace shows repeated calls between array() and value() methods in JsonParserGenerate during JSON parsing. This indicates recursive processing of nested structures without depth limitation controls. The PoC demonstrates stack exhaustion via deep nesting, which matches the CWE-400 pattern of uncontrolled recursion. These methods form the core of the recursive descent parser implementation that lacks cycle detection or depth tracking.
Ongoing coverage of React2Shell