What is GHSA-hcx3-3q5c-r5v6?

GHSA-hcx3-3q5c-r5v6 is a security advisory published by GitHub Security Advisories with Medium severity. jsonrpc4j has Infinite Loop in RPC Stream Writer

Which CVE IDs does GHSA-hcx3-3q5c-r5v6 cover?

GHSA-hcx3-3q5c-r5v6 covers the following CVE IDs: CVE-2026-24802. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

Which products are affected by GHSA-hcx3-3q5c-r5v6?

GHSA-hcx3-3q5c-r5v6 affects 1 product, including: maven/com.github.briandilley.jsonrpc4j:jsonrpc4j:\u003c 1.7.0.

GHSA-hcx3-3q5c-r5v6Medium

jsonrpc4j has Infinite Loop in RPC Stream Writer

Vendor

GitHub Security Advisories

Published

January 27, 2026

Last Modified

January 28, 2026

🔗 CVE IDs covered (1)

CVE-2026-24802 →

📋 Description

Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability in briandilley jsonrpc4j (src/main/java/com/googlecode/jsonrpc4j modules). This vulnerability is associated with program files NoCloseOutputStream.Java.

This issue affects jsonrpc4j: through 1.6.0.

🎯 Affected products1

maven/com.github.briandilley.jsonrpc4j:jsonrpc4j:< 1.7.0

🔗 References (4)

https://nvd.nist.gov/vuln/detail/CVE-2026-24802
https://github.com/briandilley/jsonrpc4j/pull/333
https://github.com/briandilley/jsonrpc4j/commit/087f5268eaf901f90d1e84062def77faa52ad8b2
https://github.com/advisories/GHSA-hcx3-3q5c-r5v6