Apache Software Foundation Johnzon vulnerabilities

• apache software foundation johnzon Apache Johnzon: ClassConverter loads & static-initializes an attacker-named class from untrusted JSON CVE-2026-71253 9.8 CriticalOctober 19, 2026
• apache johnzon Apache Johnzon: Prevent inefficient internal conversion from BigDecimal at large scale CVE-2023-33008 Fix available 5.3 MediumJuly 7, 2023