Description (CNA)
The aeson library is not safe to use to consume untrusted JSON input. A remote user could abuse this flaw to produce a hash collision in the underlying unordered-containers library by sending specially crafted JSON data, resulting in a denial of service.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / aeson | affected Fixed in 2.0.1.0 |
CWE
CWE-328
References
ADP enrichment
No English description supplied.