{"id":"CVE-2023-33460","aliases":["ALPINE-CVE-2023-33460","ALSA-2023:6551","ALSA-2023:7057","AZL-27143","AZL-35363","BELL-CVE-2023-33460","CLSA-2025-1757962664","CLSA-2026-1791454791","DEBIAN-CVE-2023-33460","DLA-3478-1","DLA-3492-1","EUVD-2023-37623","GHSA-cqgm-m7h3-xgwm","JLSEC-2026-19","MGASA-2024-0066","RHSA-2023:6551","RHSA-2023:7057","RHSA-2024:2063","RHSA-2024:2580","RLSA-2023:6551","RLSA-2023:7057","ROOT-OS-ALPINE-318-CVE-2023-33460","RSEC-2023-3","SUSE-SU-2023:3301-1","UBUNTU-CVE-2023-33460","USN-6233-1","USN-6233-2","openSUSE-SU-2024:13057-1"],"status":"published","title":"There's a memory leak in yajl 2.1.0 with use of yajl_tree_parse function. which will cause out-of...","description":"There's a memory leak in yajl 2.1.0 with use of yajl_tree_parse function. which will cause out-of-memory in server and cause crash.","severity":{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-10","score":0.01129,"percentile":0.66636,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-401"],"published":"2023-06-06T00:00:00Z","modified":"2026-11-05T05:40:51Z","fixes":[{"ecosystem":"Alpine:v3.19","package":"yajl","fixed_in":["2.1.0-r9"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"yajl","fixed_in":["2.1.0-r9"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"yajl","fixed_in":["2.1.0-r9"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"yajl","fixed_in":["2.1.0-r9"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"yajl","fixed_in":["2.1.0-r9"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"yajl","fixed_in":["2.1.0-r9"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"yajl","fixed_in":["2.1.0-22.el9"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"yajl-devel","fixed_in":["2.1.0-22.el9"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"yajl","fixed_in":["2.1.0-12.el8"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"yajl-devel","fixed_in":["2.1.0-12.el8"],"sources":["osv"]},{"ecosystem":"Azure Linux:2","package":"yajl","fixed_in":["2.1.0-19"],"sources":["osv"]},{"ecosystem":"Azure Linux:3","package":"yajl","fixed_in":["2.1.0-19"],"sources":["osv"]},{"ecosystem":"Alpaquita:23","package":"yajl","fixed_in":["2.1.0-r6"],"sources":["osv"]},{"ecosystem":"Alpaquita:stream","package":"yajl","fixed_in":["2.1.0-r9"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"yajl","fixed_in":["2.1.0-21.el9.tuxcare.els1","2.1.0-21.el9_0.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"yajl-devel","fixed_in":["2.1.0-21.el9.tuxcare.els1","2.1.0-21.el9_0.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"r-cran-jsonlite","fixed_in":["1.8.8+dfsg-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"r-cran-jsonlite","fixed_in":["1.8.8+dfsg-1"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"yajl","fixed_in":["2.1.0-3+deb12u2"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"yajl","fixed_in":["2.1.0-5"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"yajl","fixed_in":["2.1.0-5"],"sources":["osv"]},{"ecosystem":"Debian:10","package":"yajl","fixed_in":["2.1.0-3+deb10u1"],"sources":["osv"]},{"ecosystem":"Julia","package":"YAJL_jll","fixed_in":["2.1.2+0"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"yajl","fixed_in":["0:2.1.0-22.el9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"yajl-debuginfo","fixed_in":["0:2.1.0-22.el9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"yajl-debugsource","fixed_in":["0:2.1.0-22.el9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::crb","package":"yajl-debuginfo","fixed_in":["0:2.1.0-22.el9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::crb","package":"yajl-debugsource","fixed_in":["0:2.1.0-22.el9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::crb","package":"yajl-devel","fixed_in":["0:2.1.0-22.el9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"yajl","fixed_in":["0:2.1.0-12.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"yajl-debuginfo","fixed_in":["0:2.1.0-12.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"yajl-debugsource","fixed_in":["0:2.1.0-12.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::crb","package":"yajl-debuginfo","fixed_in":["0:2.1.0-12.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::crb","package":"yajl-debugsource","fixed_in":["0:2.1.0-12.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::crb","package":"yajl-devel","fixed_in":["0:2.1.0-12.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"yajl","fixed_in":["0:2.1.0-12.el8_8"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"yajl-debuginfo","fixed_in":["0:2.1.0-12.el8_8"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"yajl-debugsource","fixed_in":["0:2.1.0-12.el8_8"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.8::crb","package":"yajl-debuginfo","fixed_in":["0:2.1.0-12.el8_8"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.8::crb","package":"yajl-debugsource","fixed_in":["0:2.1.0-12.el8_8"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.8::crb","package":"yajl-devel","fixed_in":["0:2.1.0-12.el8_8"],"sources":["osv"]},{"ecosystem":"Rocky Linux:9","package":"yajl","fixed_in":["0:2.1.0-22.el9"],"sources":["osv"]},{"ecosystem":"Rocky Linux:8","package":"yajl","fixed_in":["0:2.1.0-12.el8"],"sources":["osv"]},{"ecosystem":"Root:Alpine:3.18","package":"yajl","fixed_in":["2.1.0-r60071","2.1.0-r60074","2.1.0-r60072","2.1.0-r60073","2.1.0-r60075"],"sources":["osv"]},{"ecosystem":"Root:Alpine:3.18","package":"rootio-yajl","fixed_in":["2.1.0-r60071","2.1.0-r60074","2.1.0-r60072","2.1.0-r60073","2.1.0-r60075"],"sources":["osv"]},{"ecosystem":"CRAN","package":"jsonlite","fixed_in":["1.8.8"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"libyajl","fixed_in":["2.1.0-150000.4.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.4","package":"libyajl","fixed_in":["2.1.0-150000.4.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP4","package":"libyajl","fixed_in":["2.1.0-150000.4.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP5","package":"libyajl","fixed_in":["2.1.0-150000.4.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Real Time 15 SP3","package":"libyajl","fixed_in":["2.1.0-150000.4.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Proxy 4.2","package":"libyajl","fixed_in":["2.1.0-150000.4.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Server 4.2","package":"libyajl","fixed_in":["2.1.0-150000.4.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.1","package":"libyajl","fixed_in":["2.1.0-150000.4.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.2","package":"libyajl","fixed_in":["2.1.0-150000.4.6.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap Micro 5.3","package":"libyajl","fixed_in":["2.1.0-150000.4.6.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap Micro 5.4","package":"libyajl","fixed_in":["2.1.0-150000.4.6.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.4","package":"libyajl","fixed_in":["2.1.0-150000.4.6.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.5","package":"libyajl","fixed_in":["2.1.0-150000.4.6.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:14.04:LTS","package":"yajl","fixed_in":["2.0.4-4ubuntu0.1~esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"yajl","fixed_in":["2.1.0-2ubuntu0.16.04.1~esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:18.04:LTS","package":"yajl","fixed_in":["2.1.0-2ubuntu0.18.04.1~esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"yajl","fixed_in":["2.1.0-3ubuntu0.20.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"yajl","fixed_in":["2.1.0-3ubuntu0.22.04.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.19","package":"yajl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.0-r9"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"yajl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.0-r9"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"yajl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.0-r9"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"yajl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.0-r9"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"yajl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.0-r9"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"yajl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.0-r9"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"yajl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.0-22.el9"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"yajl-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.0-22.el9"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"yajl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.0-12.el8"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"yajl-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.0-12.el8"}]}]},{"source":"osv","ecosystem":"Azure Linux:2","package":"yajl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.0-19"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"yajl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.0-19"}]}]},{"source":"osv","ecosystem":"Alpaquita:23","package":"yajl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.1.0-r5"},{"fixed":"2.1.0-r6"}]}]},{"source":"osv","ecosystem":"Alpaquita:stream","package":"yajl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.1.0-r2"},{"fixed":"2.1.0-r9"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"yajl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.0-21.el9.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"yajl-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.0-21.el9.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"yajl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.0-21.el9_0.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"yajl-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.0-21.el9_0.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"r-cran-jsonlite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.8.4+dfsg-1","1.8.5+dfsg-1","1.8.7+dfsg-1","1.8.8+dfsg-1","1.8.9+dfsg-1","1.9.1+dfsg-1","2.0.0+dfsg-1","2.0.0+dfsg-2"]},{"source":"osv","ecosystem":"Debian:13","package":"r-cran-jsonlite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.8+dfsg-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"r-cran-jsonlite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.8+dfsg-1"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"yajl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.0-3+deb12u2"}]}],"versions":["2.1.0-3","2.1.0-3+deb12u1"]},{"source":"osv","ecosystem":"Debian:13","package":"yajl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.0-5"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"yajl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.0-5"}]}]},{"source":"osv","ecosystem":"Debian:10","package":"yajl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.0-3+deb10u1"}]}],"versions":["2.1.0-3"]},{"source":"osv","ecosystem":"Debian:10","package":"yajl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.0-3+deb10u2"}]}],"versions":["2.1.0-3","2.1.0-3+deb10u1"],"bundled":3},{"source":"osv","ecosystem":"Julia","package":"YAJL_jll","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"2.1.2+0"}]}]},{"source":"osv","ecosystem":"Mageia:9","package":"yajl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.0-6.1.mga9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"yajl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.0-22.el9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"yajl-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.0-22.el9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"yajl-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.0-22.el9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"yajl-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.0-22.el9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"yajl-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.0-22.el9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"yajl-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.0-22.el9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"yajl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.0-12.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"yajl-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.0-12.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"yajl-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.0-12.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"yajl-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.0-12.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"yajl-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.0-12.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"yajl-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.0-12.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"yajl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.0-13.el8_6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"yajl-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.0-13.el8_6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"yajl-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.0-13.el8_6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::crb","package":"yajl-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.0-13.el8_6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::crb","package":"yajl-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.0-13.el8_6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::crb","package":"yajl-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.0-13.el8_6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"yajl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.0-12.el8_8"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"yajl-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.0-12.el8_8"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"yajl-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.0-12.el8_8"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::crb","package":"yajl-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.0-12.el8_8"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::crb","package":"yajl-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.0-12.el8_8"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::crb","package":"yajl-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.0-12.el8_8"}]}]},{"source":"osv","ecosystem":"Rocky Linux:9","package":"yajl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.0-22.el9"}]}]},{"source":"osv","ecosystem":"Rocky Linux:8","package":"yajl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.0-12.el8"}]}]},{"source":"osv","ecosystem":"Root:Alpine:3.18","package":"yajl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.0-r60071"},{"fixed":"2.1.0-r60074"},{"fixed":"2.1.0-r60072"},{"fixed":"2.1.0-r60073"},{"fixed":"2.1.0-r60075"}]}]},{"source":"osv","ecosystem":"Root:Alpine:3.18","package":"rootio-yajl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.0-r60071"},{"fixed":"2.1.0-r60074"},{"fixed":"2.1.0-r60072"},{"fixed":"2.1.0-r60073"},{"fixed":"2.1.0-r60075"}]}]},{"source":"osv","ecosystem":"CRAN","package":"jsonlite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0.9.12"},{"fixed":"1.8.8"}]}],"versions":["0.9.12","0.9.13","0.9.14","0.9.15","0.9.16","0.9.17","0.9.18","0.9.19","0.9.20","0.9.21","0.9.22","1.0","1.1","1.2","1.3","1.4","1.5","1.6","1.6.1","1.7.0","1.7.2","1.7.3","1.8.0","1.8.1","1.8.2","1.8.3","1.8.4","1.8.5","1.8.6","1.8.7","1.7.1"]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"libyajl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.0-150000.4.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.4","package":"libyajl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.0-150000.4.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP4","package":"libyajl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.0-150000.4.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP5","package":"libyajl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.0-150000.4.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Real Time 15 SP3","package":"libyajl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.0-150000.4.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Proxy 4.2","package":"libyajl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.0-150000.4.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Server 4.2","package":"libyajl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.0-150000.4.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.1","package":"libyajl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.0-150000.4.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.2","package":"libyajl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.0-150000.4.6.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap Micro 5.3","package":"libyajl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.0-150000.4.6.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap Micro 5.4","package":"libyajl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.0-150000.4.6.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"libyajl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.0-150000.4.6.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.5","package":"libyajl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.0-150000.4.6.1"}]}]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"yajl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.4-4ubuntu0.1~esm1"}]}],"versions":["2.0.4-4"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"yajl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.0-2ubuntu0.16.04.1~esm1"}]}],"versions":["2.1.0-2"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"argyll","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.7.0+repack-4","1.8.2+repack-1","1.8.3+repack-1","1.8.3+repack-2"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"r-cran-jsonlite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.9.19-1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"yajl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.0-2ubuntu0.18.04.1~esm1"}]}],"versions":["2.1.0-2","2.1.0-2build1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"argyll","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.9.2+repack-1","1.9.2+repack-2","2.0.0+repack-1build1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"r-cran-jsonlite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.2-1build1","1.5-2"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"yajl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.0-3ubuntu0.20.04.1"}]}],"versions":["2.1.0-3"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"argyll","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.0.1+repack-1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"r-cran-jsonlite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.6+dfsg-1","1.6.1+dfsg-1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"argyll","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.0.1+repack-2","2.2.0+repack-1","2.2.0+repack-1build1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"r-cran-jsonlite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.7.2+dfsg-1","1.7.3+dfsg-1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"yajl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.0-3ubuntu0.22.04.1"}]}],"versions":["2.1.0-3","2.1.0-3build1","2.1.0-3build2"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"argyll","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.3.1+repack-1ubuntu2","3.1.0+repack-1","3.1.0+repack-1build2","3.1.0+repack-1build3","3.1.0+repack-1build4"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"r-cran-jsonlite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.8.5+dfsg-1","1.8.7+dfsg-1","1.8.8+dfsg-1"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"argyll","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.1.0+repack-1.1","3.3.0+repack-1"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"r-cran-jsonlite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.9.1+dfsg-1"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"argyll","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.3.0+repack-1.1","3.5.0+repack-1","3.5.0+repack-1build1"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"r-cran-jsonlite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.0.0+dfsg-2"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"argyll","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.3.0+repack-1","3.3.0+repack-1.1"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"r-cran-jsonlite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.9.1+dfsg-1","2.0.0+dfsg-2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"yajl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.4-4ubuntu0.1~esm1"}]}],"versions":["2.0.4-4"],"bundled":3},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"yajl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.0-2ubuntu0.16.04.1~esm1"}]}],"versions":["2.1.0-2"],"bundled":3},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"yajl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.0-2ubuntu0.18.04.1~esm1"}]}],"versions":["2.1.0-2","2.1.0-2build1"],"bundled":3},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"yajl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.0-3ubuntu0.20.04.1"}]}],"versions":["2.1.0-3"],"bundled":3},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"yajl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.0-3ubuntu0.22.04.1"}]}],"versions":["2.1.0-3","2.1.0-3build1","2.1.0-3build2"],"bundled":3}],"products":[{"vendor":"debian","product":"debian_linux"},{"vendor":"fedoraproject","product":"fedora"},{"vendor":"yajl_project","product":"yajl"}],"references":[{"url":"https://github.com/lloyd/yajl/issues/250","tags":["x_transferred","Exploit","Issue Tracking","Patch","Third Party Advisory","report","web"]},{"url":"https://lists.debian.org/debian-lts-announce/2023/07/msg00000.html","tags":["mailing-list","x_transferred","Mailing List","Third Party Advisory","article","web"]},{"url":"https://lists.debian.org/debian-lts-announce/2023/07/msg00013.html","tags":["mailing-list","x_transferred","Mailing List","Third Party Advisory","article","web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KLE3C4CECEJ4EUYI56KXI6OWACWXX7WN/","tags":["vendor-advisory","x_transferred","advisory","web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IBUUHG27RM4ROEYKMVRROR27AX6R63MB/","tags":["vendor-advisory","x_transferred","advisory","web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YO32YDJ74DADC7CMJNLSLBVWN5EXGF5J/","tags":["vendor-advisory","x_transferred","advisory","web"]},{"url":"https://lists.debian.org/debian-lts-announce/2023/08/msg00003.html","tags":["mailing-list","x_transferred","article","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-33460","tags":["web","advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IBUUHG27RM4ROEYKMVRROR27AX6R63MB"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KLE3C4CECEJ4EUYI56KXI6OWACWXX7WN"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YO32YDJ74DADC7CMJNLSLBVWN5EXGF5J"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/IBUUHG27RM4ROEYKMVRROR27AX6R63MB"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KLE3C4CECEJ4EUYI56KXI6OWACWXX7WN"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YO32YDJ74DADC7CMJNLSLBVWN5EXGF5J"},{"url":"https://github.com/advisories/GHSA-cqgm-m7h3-xgwm"},{"url":"https://security.alpinelinux.org/vuln/CVE-2023-33460","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2023:6551","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-33460","tags":["report"]},{"url":"https://bugzilla.redhat.com/2221249","tags":["report"]},{"url":"https://errata.almalinux.org/9/ALSA-2023-6551.html","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2023:7057","tags":["advisory"]},{"url":"https://errata.almalinux.org/8/ALSA-2023-7057.html","tags":["advisory"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2023-33460","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/almalinux9.2esu/CLSA-2025-1757962664.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/almalinux9.2esu/CLSA-2026-1791454791.html","tags":["advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/33xxx/CVE-2023-33460.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2023-33460","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2024-0066.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=32072","tags":["report"]},{"url":"https://www.debian.org/lts/security/2023/dla-3478","tags":["web"]},{"url":"https://www.debian.org/lts/security/2023/dla-3492","tags":["web"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/9/html/9.3_release_notes/index","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2221249","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_6551.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-33460","tags":["advisory","report"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.9_release_notes/index","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_7057.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2024:2063","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2072912","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_2063.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-24795","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-24795","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-24795","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2024:2580","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_2580.json","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2023:6551","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2023:7057","tags":["advisory"]},{"url":"https://github.com/jeroen/jsonlite/pull/421","tags":["web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KLE3C4CECEJ4EUYI56KXI6OWACWXX7WN/","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20233301-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1212928","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2023-33460","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2023-33460","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-6233-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-6233-2","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2017-16516","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-24795","tags":["report"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2023-33460","description":"There's a memory leak in yajl 2.1.0 with use of yajl_tree_parse function. which will cause out-of-memory in server and cause crash.","status":"published","published":"2023-06-06T00:00:00Z","modified":"2025-01-08T16:24:46.526Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium","assessor":"adp"}],"cwes":["CWE-401"],"updated_at":"2026-11-02T14:35:34.170609Z"}],"euvd":[{"id":"EUVD-2023-37623","description":"There's a memory leak in yajl 2.1.0 with use of yajl_tree_parse function. which will cause out-of-memory in server and cause crash.","status":"published","published":"2023-06-06T00:00:00Z","modified":"2025-01-08T16:24:46Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-03T00:04:23.880435Z"}],"ghsa":[{"id":"GHSA-cqgm-m7h3-xgwm","title":"There's a memory leak in yajl 2.1.0 with use of yajl_tree_parse function. which will cause out-of...","description":"There's a memory leak in yajl 2.1.0 with use of yajl_tree_parse function. which will cause out-of-memory in server and cause crash.","status":"published","published":"2023-06-06T12:30:14Z","modified":"2024-04-04T04:35:05Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"cwes":["CWE-401"],"updated_at":"2026-11-02T14:56:24.94679Z"}],"nvd":[{"id":"CVE-2023-33460","description":"There's a memory leak in yajl 2.1.0 with use of yajl_tree_parse function. which will cause out-of-memory in server and cause crash.","status":"published","published":"2023-06-06T12:15:09.447Z","modified":"2026-06-17T06:01:45.64Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary"},{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium","assessor":"secondary"}],"cwes":["CWE-401"],"updated_at":"2026-11-02T14:08:05.329837Z"}],"osv":[{"id":"ALPINE-CVE-2023-33460","description":"There's a memory leak in yajl 2.1.0 with use of yajl_tree_parse function. which will cause out-of-memory in server and cause crash.","status":"published","published":"2023-06-06T12:15:09.447Z","modified":"2026-10-26T17:17:58.624996139Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:27:49.709457Z"},{"id":"AZL-27143","title":"CVE-2023-33460 affecting package yajl for versions less than 2.1.0-19","description":"There's a memory leak in yajl 2.1.0 with use of yajl_tree_parse function. which will cause out-of-memory in server and cause crash.","status":"published","published":"2023-06-06T12:15:09Z","modified":"2026-04-21T04:24:05.019681Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:28:03.093433Z"},{"id":"AZL-35363","title":"CVE-2023-33460 affecting package yajl for versions less than 2.1.0-19","description":"There's a memory leak in yajl 2.1.0 with use of yajl_tree_parse function. which will cause out-of-memory in server and cause crash.","status":"published","published":"2023-06-06T12:15:09Z","modified":"2026-11-05T05:40:51Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-05T16:41:19.554273Z"},{"id":"BELL-CVE-2023-33460","status":"published","published":"2023-10-18T13:44:49.48721Z","modified":"2026-01-26T09:33:21.86932Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:28:17.742221Z"},{"id":"CVE-2023-33460","description":"There's a memory leak in yajl 2.1.0 with use of yajl_tree_parse function. which will cause out-of-memory in server and cause crash.","status":"published","published":"2023-06-06T00:00:00Z","modified":"2026-10-28T02:30:55.040902579Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:44:32.116263Z"},{"id":"DEBIAN-CVE-2023-33460","description":"There's a memory leak in yajl 2.1.0 with use of yajl_tree_parse function. which will cause out-of-memory in server and cause crash.","status":"published","published":"2023-06-06T12:15:09.447Z","modified":"2026-10-26T18:02:29.734417905Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:45:39.679062Z"},{"id":"JLSEC-2026-19","title":"There's a memory leak in yajl 2.1.0 with use of `yajl_tree_parse` function","description":"There's a memory leak in yajl 2.1.0 with use of `yajl_tree_parse` function. which will cause out-of-memory in server and cause crash.","status":"published","published":"2026-04-01T13:43:19.21Z","modified":"2026-07-25T18:24:03.635335886Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:47:18.159338Z"},{"id":"RHSA-2023:6551","title":"Red Hat Security Advisory: yajl security update","status":"published","published":"2024-09-16T12:48:31Z","modified":"2026-06-26T12:21:18.875885967Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:53:11.734882Z"},{"id":"RHSA-2023:7057","title":"Red Hat Security Advisory: yajl security update","status":"published","published":"2024-09-16T12:48:41Z","modified":"2026-06-26T12:22:21.598008171Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:53:11.734882Z"},{"id":"RHSA-2024:2063","title":"Red Hat Security Advisory: yajl security update","status":"published","published":"2024-09-16T12:48:51Z","modified":"2026-06-26T12:22:22.231934143Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:53:13.30378Z"},{"id":"RHSA-2024:2580","title":"Red Hat Security Advisory: yajl security update","status":"published","published":"2024-09-16T12:49:00Z","modified":"2026-06-26T12:22:38.673310536Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:53:13.30378Z"},{"id":"ROOT-OS-ALPINE-318-CVE-2023-33460","title":"CVE-2023-33460 in yajl - Patched by Root","description":"Root has patched CVE-2023-33460 in the yajl package for Root:Alpine:3.18. Multiple fixed versions available.","status":"published","published":"2026-09-29T10:58:36Z","modified":"2026-09-29T11:15:07.182622684Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:53:28.259095Z"},{"id":"UBUNTU-CVE-2023-33460","description":"There's a memory leak in yajl 2.1.0 with use of yajl_tree_parse function. which will cause out-of-memory in server and cause crash.","status":"published","published":"2023-06-06T12:15:00Z","modified":"2026-10-17T12:57:19.111201648Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"},{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T16:54:20.997471Z"},{"id":"ALSA-2023:6551","title":"Moderate: yajl security update","description":"Yet Another JSON Library (YAJL) is a small event-driven (SAX-style) JSON parser written in ANSI C, and a small validating JSON generator.\n\nSecurity Fix(es):\n\n* yajl: Memory leak in yajl_tree_parse function (CVE-2023-33460)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.","status":"published","published":"2023-11-07T00:00:00Z","modified":"2026-10-29T11:31:58.96374079Z","updated_at":"2026-11-02T15:27:52.091404Z"},{"id":"ALSA-2023:7057","title":"Moderate: yajl security update","description":"Yet Another JSON Library (YAJL) is a small event-driven (SAX-style) JSON parser written in ANSI C, and a small validating JSON generator.\n\nSecurity Fix(es):\n\n* yajl: Memory leak in yajl_tree_parse function (CVE-2023-33460)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.","status":"published","published":"2023-11-14T00:00:00Z","modified":"2026-10-29T11:02:19.305750804Z","updated_at":"2026-11-02T15:27:52.091404Z"},{"id":"CLSA-2025-1757962664","title":"yajl: Fix of CVE-2023-33460","description":"- CVE-2023-33460: fix memory leak in yajl_tree_parse function","status":"published","published":"2025-09-15T18:57:48Z","modified":"2026-06-01T00:31:11.22494669Z","updated_at":"2026-11-02T15:43:42.025438Z"},{"id":"CLSA-2026-1791454791","title":"yajl: Fix of CVE-2023-33460","description":"- CVE-2023-33460: fix memory leak in yajl_tree_parse function\n- rebuild with the vendor .el9_0 dist so the update outranks AlmaLinux\n  2.1.0-21.el9_0","status":"published","published":"2026-10-08T10:20:02Z","modified":"2026-10-26T09:30:53.565370042Z","updated_at":"2026-11-02T15:43:49.016976Z"},{"id":"DLA-3478-1","title":"yajl - security update","status":"published","published":"2023-07-02T00:00:00Z","modified":"2026-03-09T01:20:35.487711Z","updated_at":"2026-11-02T15:46:11.734021Z"},{"id":"DLA-3492-1","title":"yajl - security update","status":"published","published":"2023-07-11T00:00:00Z","modified":"2026-03-09T01:23:22.692446Z","updated_at":"2026-11-02T15:46:11.734021Z"},{"id":"MGASA-2024-0066","title":"Updated yajl packages fix security vulnerabilities","description":"The updated packages fix security vulnerabilities:\nIn the yajl-ruby gem 1.3.0 for Ruby, when a crafted JSON file is\nsupplied to Yajl::Parser.new.parse, the whole ruby process crashes with\na SIGABRT in the yajl_string_decode function in yajl_encode.c. This\nresults in the whole ruby process terminating and potentially a denial\nof service. (CVE-2017-16516)\nThere's a memory leak in yajl 2.1.0 with use of yajl_tree_parse\nfunction. which will cause out-of-memory in server and cause crash.\n(CVE-2023-33460)\n","status":"published","published":"2024-03-15T22:51:55Z","modified":"2026-04-16T04:43:35.56997271Z","updated_at":"2026-11-02T15:49:42.684501Z"},{"id":"openSUSE-SU-2024:13057-1","title":"libyajl-devel-2.1.0-8.1 on GA media","description":"These are all security issues fixed in the libyajl-devel-2.1.0-8.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T03:48:51.325351Z","updated_at":"2026-11-02T16:58:36.025801Z"},{"id":"RLSA-2023:6551","title":"Moderate: yajl security update","description":"Yet Another JSON Library (YAJL) is a small event-driven (SAX-style) JSON parser written in ANSI C, and a small validating JSON generator.\n\nSecurity Fix(es):\n\n* yajl: Memory leak in yajl_tree_parse function (CVE-2023-33460)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Rocky Linux 9.3 Release Notes linked from the References section.","status":"published","published":"2024-05-10T14:32:38.11477Z","modified":"2026-02-04T08:00:09.351225Z","updated_at":"2026-11-02T15:53:24.63379Z"},{"id":"RLSA-2023:7057","title":"Moderate: yajl security update","description":"Yet Another JSON Library (YAJL) is a small event-driven (SAX-style) JSON parser written in ANSI C, and a small validating JSON generator.\n\nSecurity Fix(es):\n\n* yajl: Memory leak in yajl_tree_parse function (CVE-2023-33460)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Rocky Linux 8.9 Release Notes linked from the References section.","status":"published","published":"2023-11-28T22:43:02.525343Z","modified":"2026-02-05T09:00:12.502929Z","updated_at":"2026-11-02T15:53:24.63379Z"},{"id":"RSEC-2023-3","title":"Memory leak vulnerability","description":"The jsonlite R package is exposed to a vulnerability due to its use of yajl library version 2.1.0. The vulnerability originates from the yajl_tree_parse function within yajl. Attackers can exploit this flaw to cause a memory leak, which will result in out-of-memory in server and lead to a crash.","status":"published","published":"2023-07-18T04:37:21.6Z","modified":"2025-05-19T19:43:48.343626Z","updated_at":"2026-11-02T15:53:39.492624Z"},{"id":"SUSE-SU-2023:3301-1","title":"Security update for libyajl","description":"This update for libyajl fixes the following issues:\n\n  - CVE-2023-33460: Fixed memory leak which could cause out-of-memory in server (bsc#1212928).\n","status":"published","published":"2023-08-14T05:25:31Z","modified":"2026-02-04T03:29:00.430316Z","updated_at":"2026-11-02T15:53:53.440387Z"},{"id":"USN-6233-1","title":"yajl vulnerabilities","description":"It was discovered that YAJL was not properly performing bounds checks when\ndecoding a string with escape sequences. If a user or automated system\nusing YAJL were tricked into processing specially crafted input, an\nattacker could possibly use this issue to cause a denial of service\n(application abort). (CVE-2017-16516)\n\nIt was discovered that YAJL was not properly handling memory allocation\nwhen dealing with large inputs, which could lead to heap memory\ncorruption. If a user or automated system using YAJL were tricked into\nrunning a specially crafted large input, an attacker could possibly use\nthis issue to cause a denial of service. (CVE-2022-24795)\n\nIt was discovered that memory leaks existed in one of the YAJL parsing\nfunctions. An attacker could possibly use this issue to cause a denial of\nservice (memory exhaustion). (CVE-2023-33460)\n","status":"published","published":"2023-07-18T13:31:52Z","modified":"2026-06-29T13:50:54.329530594Z","updated_at":"2026-11-02T16:58:17.305935Z"},{"id":"USN-6233-2","title":"yajl vulnerabilities","description":"USN-6233-1 fixed vulnerabilities in YAJL. This update provides the\ncorresponding updates for Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, and Ubuntu\n23.04.\n\nOriginal advisory details:\n\n It was discovered that YAJL was not properly performing bounds checks when\n decoding a string with escape sequences. If a user or automated system\n using YAJL were tricked into processing specially crafted input, an\n attacker could possibly use this issue to cause a denial of service\n (application abort). (CVE-2017-16516)\n \n It was discovered that YAJL was not properly handling memory allocation\n when dealing with large inputs, which could lead to heap memory\n corruption. If a user or automated system using YAJL were tricked into\n running a specially crafted large input, an attacker could possibly use\n this issue to cause a denial of service. (CVE-2022-24795)\n \n It was discovered that memory leaks existed in one of the YAJL parsing\n functions. An attacker could possibly use this issue to cause a denial of\n service (memory exhaustion). (CVE-2023-33460)\n","status":"published","published":"2023-12-14T16:51:18Z","modified":"2026-04-27T16:30:59.760532Z","updated_at":"2026-11-02T16:58:17.305935Z"}]}}