Janino Project

janino_project

1 CVE • 1 product

Products (1)

Click to collapse

Toggle

Janino

janino

1 CVE

CVEs (1)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2023-33546 1Janino Project 1Janino Jun 17, 2026 Jun 1, 2023 N/A· v4 5.5 MEDIUM· v3 N/A· v2 Janino 3.1.9 and earlier are subject to denial of service (DOS) attacks when using the expression evaluator.guess parameter name method. If the parser runs on user-supplied input, an attacker could supply content that ca...Show more Janino 3.1.9 and earlier are subject to denial of service (DOS) attacks when using the expression evaluator.guess parameter name method. If the parser runs on user-supplied input, an attacker could supply content that causes the parser to crash due to a stack overflow. NOTE: this is disputed by multiple parties because Janino is not intended for use with untrusted input.Show less

CVE

VENDORS

PRODUCTS

UPDATED

PUBLISHED

CVSS

CVE-2023-33546

1Janino Project

1Janino

Jun 17, 2026

Jun 1, 2023

N/A· v4

5.5 MEDIUM· v3

N/A· v2

Janino 3.1.9 and earlier are subject to denial of service (DOS) attacks when using the expression evaluator.guess parameter name method. If the parser runs on user-supplied input, an attacker could supply content that causes the parser to crash due to a stack overflow. NOTE: this is disputed by multiple parties because Janino is not intended for use with untrusted input.Show less