Debian Libjson-Java vulnerabilities

CVE-2024-47855 [MEDIUM] CVE-2024-47855: libjson-java - util/JSONTokener.java in JSON-lib before 3.1.0 mishandles an unbalanced comment ... util/JSONTokener.java in JSON-lib before 3.1.0 mishandles an unbalanced comment string. Scope: local bookworm: open bullseye: open forky: resolved (fixed in 3.1.0+dfsg-1) sid: resolved (fixed in 3.1.0+dfsg-1) trixie: resolved (fixed in 3.1.0+dfsg-1)

CVE-2023-5072 [HIGH] CVE-2023-5072: jenkins-json - Denial of Service in JSON-Java versions up to and including 20230618.  A bug in... Denial of Service in JSON-Java versions up to and including 20230618. A bug in the parser means that an input string of modest size can lead to indefinite amounts of memory being used. Scope: local bookworm: open bullseye: open forky: open sid: open trixie: open