CVE-2023-34616

Name of the Vulnerable Software and Affected Versions pbjson versions 0.4.0 and earlier

Description An issue allows attackers to cause a denial of service or other unspecified impacts via a crafted object that uses cyclic dependencies.

Recommendations For versions 0.4.0 and earlier, consider disabling the use of cyclic dependencies in objects until a patch is available. As a temporary workaround, restrict the processing of crafted objects to minimize the risk of exploitation. Avoid using pbjson for parsing objects with cyclic dependencies until the issue is resolved.