CVE-2023-33460

Name of the Vulnerable Software and Affected Versions yajl version 2.1.0

Description The issue is related to a memory leak caused by the use of the yajl tree parse function in the yajl library. This can lead to out-of-memory conditions in servers, resulting in crashes. The vulnerability can be exploited by remote attackers to cause a denial of service.

Recommendations For yajl version 2.1.0, consider disabling the yajl tree parse function as a temporary workaround until a patch is available. Restricting the use of this function can help minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.