dependency-check / dependency-check/DependencyCheck
[FP]: CVE-2024-21907 FP for Newtonsoft.Json > 13.0.1
Open
FP Report
- Dominant language
- Java
- Stars
- 7.7k
- Forks
- 1.4k
- Avg merge
- 9d 22h
- Merged PRs (30d)
- 13
Description
### Package URl
pkg:generic/Newtonsoft.Json.Bson@1.0.2
### CPE
cpe:2.3:a:newtonsoft:json.net:*:*:*:*:*:*:*:* versions up to (excluding) 13.0.1
### CVE
CVE-2024-21907
### ODC Integration
{"label"=>"CLI"}
### ODC Version
9.0.9
### Description
As stated in CVE
DependencyChecker reports vulnerability **CVE-2024-21907** on locally installed version of Newtonsoft.Json library 13.0.3
According to the description of **CVE-2024-21907** the issue was fixed in Newtonsoft library 13.0.1
Contributor guide
Assessment
This issue has not been assessed yet.