HSEC-2023-0001
NoneCVSS
—
EPSS
—
Published
Nov 14, 2025
CISA due date
—
The record
Hash flooding vulnerability in aeson
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Debian:11 | haskell-aeson | 0 | No fix |
| Debian:12 | haskell-aeson | 0 | 2.0.3.0-1 |
| Debian:13 | haskell-aeson | 0 | 2.0.3.0-1 |
| Debian:14 | haskell-aeson | 0 | 2.0.3.0-1 |
| Hackage | aeson | 0.4.0.0 | 2.0.1.0 |
| Ubuntu:20.04:LTS | haskell-aeson | 0 | No fix |
| Ubuntu:22.04:LTS | haskell-aeson | 0 | No fix |
| Ubuntu:Pro:16.04:LTS | haskell-aeson | 0 | No fix |
| Ubuntu:Pro:18.04:LTS | haskell-aeson | 0 | No fix |