What’s Vulnerable › Products

Apache Software Foundation Apache Johnzon vulnerabilities

2 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 1 published in the last 12 months.

Check whether your Apache Software Foundation Apache Johnzon version is affected

Latest Apache Software Foundation Apache Johnzon vulnerabilities

• CVE-2026-71253 — Apache Johnzon: ClassConverter loads & static-initializes an attacker-named class from untrusted JSON (CVSS 9.8)
• CVE-2023-33008 — Apache Johnzon: Prevent inefficient internal conversion from BigDecimal at large scale (CVSS 5.3)