What is GHSA-wwcp-26wc-3fxm?

GHSA-wwcp-26wc-3fxm is a security advisory published by GitHub Security Advisories with Medium severity. JSON-lib mishandles an unbalanced comment string

Which CVE IDs does GHSA-wwcp-26wc-3fxm cover?

GHSA-wwcp-26wc-3fxm covers the following CVE IDs: CVE-2024-47855. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-wwcp-26wc-3fxm?

GHSA-wwcp-26wc-3fxm has a CVSS v3 base score of 5.3, published by GitHub Security Advisories.

Which products are affected by GHSA-wwcp-26wc-3fxm?

GHSA-wwcp-26wc-3fxm affects 2 products, including: maven/org.kordamp.json:json-lib-core:\u003c 3.1.0; maven/net.sf.json-lib:json-lib:\u003c= 2.4.

GHSA-wwcp-26wc-3fxmMediumCVSS 5.3

JSON-lib mishandles an unbalanced comment string

Vendor

GitHub Security Advisories

Published

October 4, 2024

Last Modified

April 16, 2026

🔗 CVE IDs covered (1)

CVE-2024-47855 →

📋 Description

util/JSONTokener.java in JSON-lib before 3.1.0 mishandles an unbalanced comment string.

🎯 Affected products2

maven/org.kordamp.json:json-lib-core:< 3.1.0
maven/net.sf.json-lib:json-lib:<= 2.4

🔗 References (6)

https://nvd.nist.gov/vuln/detail/CVE-2024-47855
https://github.com/kordamp/json-lib/commit/a0c4a0eae277130e22979cf307c95dec4005a78e
https://github.com/kordamp/json-lib/compare/v3.0.3...v3.1.0
https://github.com/kordamp/json-lib/blob/35a1f2aa22bac260438c0cf2399549311b5a21aa/pom.xml
https://sourceforge.net/projects/json-lib
https://github.com/advisories/GHSA-wwcp-26wc-3fxm