Skip to content

org.json:json version #798

Closed as duplicate
Closed as duplicate

Description

@grabbe-bryghtlabs

Describe the bug
socket.io-client is currently using org.json:json:20220924
Update org.json:json to 20231013 or newer

json stack overflow vulnerability
https://avd.aquasec.com/nvd/cve-2022-45688

JSON-java: parser confusion leads to OOM
https://avd.aquasec.com/nvd/cve-2023-5072

Client
version 2.1.2

Expected behavior
Updated version to pass security inspections

Platform:

  • Device: Pixel 10
  • OS: Android 16

Additional context
Add any other context about the problem here.

Metadata

Metadata

Assignees

No one assigned

    Labels

    Type

    No type

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions