CVE-2023-33546

CVE-2023-33546 affects Janino versions 3.1.9 and earlier, where a denial-of-service (DoS) vulnerability exists in the expression evaluator's guess parameter name method. An attacker could trigger a stack overflow by providing specially crafted input to the parser, leading to a crash. The vulnerability has a CVSS score of 5.5 (Medium), indicating a local attack vector with low complexity, requiring user interaction, and resulting in high availability impact. Despite the potential for DoS, its exploitability is disputed due to Janino's intended use case not involving untrusted input, and there is no evidence of active exploitation, public exploit code, or significant community discussion.