All issues

Search results

[Security] Unrestricted Copy/Move Operations Enable Intra-Document Data Exfiltration

Status: Open.

#170In java-json-tools/json-patch;

· york-shen opened on Jul 29, 2026

[Security] Mass Assignment via Empty-Path Add Operation Enables Full Document Replacement

Status: Open.

#169In java-json-tools/json-patch;

· york-shen opened on Jul 29, 2026

[Security] Stack Overflow DoS via Uncontrolled Recursion in JsonMergePatch Deserialization

Status: Open.

#168In java-json-tools/json-patch;

· york-shen opened on Jul 29, 2026

[Security] Denial of Service via Unbounded Patch Operations and deepCopy in JsonPatch.apply()

Status: Open.

#167In java-json-tools/json-patch;

· york-shen opened on Jul 29, 2026

Support for Jackson 3

Status: Open.

#166In java-json-tools/json-patch;

· pbartoszek opened on Dec 1, 2025

JsonDiff bug found

Status: Open.

#163In java-json-tools/json-patch;

· fmoghaddam opened on Oct 1, 2024

JSONPatch.fromJson returning incorrect patch.

Status: Open.

#156In java-json-tools/json-patch;

· bhatiamayank007 opened on Nov 7, 2023

Generator generates wrong JSON patch

Status: Open.

#155In java-json-tools/json-patch;

· petr-ujezdsky opened on Nov 1, 2023

v1.13 JsonPatch.java does not have public accessor for getOperations()

Status: Open.

#149In java-json-tools/json-patch;

· michael-schaefer opened on May 1, 2023

json-patch version 1.13 not working with maven

Status: Open.

#148In java-json-tools/json-patch;

· desoss opened on Feb 15, 2023

Non Object Merge Patch return the patch rather than the patched.

Status: Open.

#147In java-json-tools/json-patch;

· ieb opened on Jan 30, 2023

Consider upgrading gradle

Status: Open.

#146In java-json-tools/json-patch;

· alexanderankin opened on Jan 15, 2023