-
CVSS Score
-| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| cc.plural:jsonij | maven | <= 0.5.2 |
The stack trace shows repeated calls between parseArray and parseValue when processing nested arrays. The PoC demonstrates that deeply nested JSON arrays trigger stack exhaustion. Both functions handle recursive parsing of nested structures without implementing depth tracking or cycle detection, making them vulnerable to stack overflow via crafted cyclic dependencies. This matches known remediation patterns from other JSON parsers that added depth limits or iterative processing.