Apache Johnzon (Apache Software Foundation) - vulnerabilities (CVEs)

2 CVEs, 1 in the last 30 days, 1 known versions, newest CVE from 2026-10-19. Vendor: Apache Software Foundation.

CVEs of Apache Johnzon

• CVE-2026-71253 - CVSS 9.8 (critical), 2026-10-19: Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection') vulnerability in Apache Johnzon. ClassConverter loads & static-initializes…
• CVE-2023-33008 - CVSS 5.3 (medium), 2023-07-07: Deserialization of Untrusted Data vulnerability in Apache Software Foundation Apache Johnzon. A malicious attacker can craft up some JSON input that uses…