Medium, CVSS 5.3MavenPublished
jsonrpc4j has Infinite Loop in RPC Stream Writer
CVE-2026-24802 · GHSA-hcx3-3q5c-r5v6
- Affected
- Maven com.github.briandilley.jsonrpc4j:jsonrpc4j < 1.7.0
- Fixed in
- 1.7.0· Vendor fix available
- Issue
- Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability in briandilley jsonrpc4j (src/main/java/com/googlecode/jsonrpc4j modules). This vulnerability is associated with program files NoCloseOutputStream.Java. This issue affects jsonrpc4j: through 1.6.0.
Recommended action: Upgrade to 1.7.0 or later, then redeploy and verify.A vendor fix does not resolve your finding until you verify it in your own systems.