CVE-2022-3433 | BDVDB-2026-186010 Detail

Description#

The aeson library is not safe to use to consume untrusted JSON input. A remote user could abuse this flaw to produce a hash collision in the underlying unordered-containers library by sending specially crafted JSON data, resulting in a denial of service.

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12022-10-10Record published in the CVE List.
2. Version 22024-08-03Most recent update recorded in the CVE List.