Patch CVE-2022-24795
The patch uses an abort() to prevent heap memory corruption, but per the discussion here https://github.com/lloyd/yajl/pull/240 it seems that's the best option available without a significant rewrite of the library.
parent
65bfd21c
Please register or sign in to comment