Skip to content

Apache Software Foundation Apache Johnzon

CVE-2026-71253 Critical 9.8 Apache Johnzon: ClassConverter loads & static-initializes an attacker-named class from untrusted JSON 0.4%
CVE-2023-33008 Medium 5.3 Apache Johnzon: Prevent inefficient internal conversion from BigDecimal at large scale 1.4%