RSEC-2023-3
Memory leak vulnerability
Published Jul 18, 2023 · updated May 19, 2025
The jsonlite R package is exposed to a vulnerability due to its use of yajl library version 2.1.0. The vulnerability originates from the yajl_tree_parse function within yajl. Attackers can exploit this flaw to cause a memory leak, which will result in out-of-memory in server and lead to a crash.
Code
The project this record applies to. Exploit listings stay in References.
Timeline
Detection, updates, and resolution for this record.
Jul 18, 2023 · OSV.dev
Detected
The jsonlite R package is exposed to a vulnerability due to its use of yajl library version 2.1.0. The vulnerability originates from the yajl_tree_parse function within yajl. Attackers can exploit this flaw to cause a memory leak, which will result in out-of-memory in server and lead to a crash.
May 19, 2025 · OSV.dev
Fix available
jsonlite fixed in 1.8.8
May 19, 2025 · OSV.dev
Fix available
jsonlite fixed in 1.8.8
May 19, 2025 · OSV.dev
Updated
The jsonlite R package is exposed to a vulnerability due to its use of yajl library version 2.1.0. The vulnerability originates from the yajl_tree_parse function within yajl. Attackers can exploit this flaw to cause a memory leak, which will result in out-of-memory in server and lead to a crash.
Affected
- CRAN jsonlite0.9.12 → 1.8.8