Import Source
https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-60889.json
JSON Data
https://api.test.osv.dev/v1/vulns/AZL-60889
Upstream
Published
2025-04-19T22:15:14Z
Modified
2026-04-01T05:19:40.622208Z
Summary
CVE-2023-26819 affecting package libglvnd for versions less than 1.7.0-3
Details

cJSON 1.7.15 might allow a denial of service via a crafted JSON document such as {"a": true, "b": [ null,9999999999999999999999999999999999999999999999912345678901234567]}.

References

Affected packages

Azure Linux:3 / libglvnd

Package

Name
libglvnd
Purl
pkg:rpm/azure-linux/libglvnd

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.7.0-3

Database specific

source
"https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-60889.json"