CVE-2022-3433 Information

Description

The aeson library is not safe to use to consume untrusted JSON input. A remote user could abuse this flaw to produce a hash collision in the underlying unordered-containers library by sending specially crafted JSON data resulting in a denial of service.

Reference

https://cs-syd.eu/posts/2021-09-11-json-vulnerability