Json Smart Project maintains a lightweight JSON parsing and manipulation library that, despite a narrow product scope, sees embedding across Java applications where JSON serialization is required. The vendor's vulnerability surface appears concentrated in the core library itself rather than in a diversified product portfolio, and any remediation typically depends on downstream applications rebuilding against patched releases. Current CVE counts, severity distribution, and exploitation activity are shown alongside this summary.
The number and severity of CVEs published that impact products developed by Json Smart Project over time
Signals from CVEs in this vendor scope (3 CVEs).
3 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2021-31684HIGH A vulnerability was discovered in the indexOf function of JSONParserByteArray in JSON Smart versions 1.3 and 2.4 which causes a denial of service (DOS) via a crafted web request. | Jun 1, 2021 | 7.5 | 25 | NO | NO |
CVE-2021-27568MEDIUM An issue was discovered in netplex json-smart-v1 through 2015-10-23 and json-smart-v2 through 2.4. An exception is thrown from a function, but it is not caught, as demonstrated by | Feb 23, 2021 | 5.9 | 22 | NO | NO |
CVE-2023-1370HIGH [Json-smart](https://netplex.github.io/json-smart/) is a performance focused, JSON processor lib.
When reaching a ‘[‘ or ‘{‘ character in the JSON input, the code parses an array | Mar 22, 2023 | 7.5 | 19 | NO | NO |
Signals from CVEs in this vendor scope (3 CVEs).
An overview of all social media posts that mention a CVE ID that affects a product developed by Json Smart Project.
Media articles that mention a CVE ID that affects a product developed by Json Smart Project — matched by CVE ID, not by vendor name.