{"id":"OSV-2024-167","aliases":[],"status":"published","title":"Security exception in com.github.javaparser.GeneratedJavaParser.Expression","description":"OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=65974\n\n```\nCrash type: Security exception\nCrash state:\ncom.github.javaparser.GeneratedJavaParser.Expression\njava.base/java.lang.String.startsWith\njava.base/java.net.URL.isBuiltinStreamHandler\n```","facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"published":"2024-03-14T00:10:52.218597Z","modified":"2024-04-29T11:19:04Z","affected":[{"source":"osv","ecosystem":"OSS-Fuzz","package":"javaparser","ranges":[{"type":"GIT","events":[{"introduced":"59585a5579910e36bc75ac266b5b1cb70ddc4770"},{"fixed":"e27e01b56d7398821c94ecb05d6caa0a928ad7ce"}]}],"versions":["javaparser-parent-3.24.10","javaparser-parent-3.24.4","javaparser-parent-3.24.6","javaparser-parent-3.24.7","javaparser-parent-3.24.8","javaparser-parent-3.24.9","javaparser-parent-3.25.0","javaparser-parent-3.25.1","javaparser-parent-3.25.2","javaparser-parent-3.25.3","javaparser-parent-3.25.4","javaparser-parent-3.25.5","javaparser-parent-3.25.6","javaparser-parent-3.25.7","javaparser-parent-3.25.8","javaparser-parent-3.25.9","v_snapshot_56be443","v_snapshot_e2590f3"]}],"references":[{"url":"https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=65974","tags":["report"]}],"sources":{"osv":[{"id":"OSV-2024-167","title":"Security exception in com.github.javaparser.GeneratedJavaParser.Expression","description":"OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=65974\n\n```\nCrash type: Security exception\nCrash state:\ncom.github.javaparser.GeneratedJavaParser.Expression\njava.base/java.lang.String.startsWith\njava.base/java.net.URL.isBuiltinStreamHandler\n```\n","status":"published","published":"2024-03-14T00:10:52.218597Z","modified":"2024-04-29T11:19:04.592001Z","updated_at":"2026-11-02T15:52:49.981578Z"}]}}