dependency-check / dependency-check/DependencyCheck

[FP]: CVE-2024-21907 FP for Newtonsoft.Json > 13.0.1

Open
#6,413 5 comments 0 reactions 0 assignees View on GitHub
FP Report
Dominant language
Java
Stars
7.7k
Forks
1.4k
Avg merge
9d 22h
Merged PRs (30d)
13

Description

### Package URl

pkg:generic/Newtonsoft.Json.Bson@1.0.2

### CPE

cpe:2.3:a:newtonsoft:json.net:*:*:*:*:*:*:*:* versions up to (excluding) 13.0.1

### CVE

CVE-2024-21907

### ODC Integration

{"label"=>"CLI"}

### ODC Version

9.0.9

### Description

As stated in CVE

DependencyChecker reports vulnerability **CVE-2024-21907** on locally installed version of Newtonsoft.Json library 13.0.3

According to the description of **CVE-2024-21907** the issue was fixed in Newtonsoft library 13.0.1

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.