All 4 CVE vulnerabilities found in JSON-Patch, with AI-generated Chinese analysis, references, and POCs.
Vendor: Starcounter-Jack
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-86512 | java-json-tools json-patch Copy Move Operations CopyOperation.java MoveOperation.apply access control CWE-284 | 6.3 | Medium | 2026-09-08 |
| CVE-2026-86319 | java-json-tools json-patch Patch Operation JsonPatch.java JsonPatch.apply resource consumption CWE-400 | 5.3 | Medium | 2026-09-07 |
| CVE-2026-86318 | java-json-tools json-patch JsonMergePatchDeserializer.java JsonMergePatch.fromJson stack-based overflow CWE-121 | 5.3 | Medium | 2026-09-07 |
| CVE-2021-4279 | Starcounter-Jack JSON-Patch prototype pollution CWE-1321 | 6.3 | Medium | 2022-12-25 |
All 4 known CVE vulnerabilities affecting JSON-Patch with full Chinese analysis, references, and POCs where available.