Findings

[GanbaruTobi]

json-smart in both variants, json-smart-v1 and json-smart-v2, have an uncaught exception in the parser, which can lead to problems like DoS in webserver etc.

CVE-2021-27568

netplex/json-smart-v1#7
netplex/json-smart-v2#60

[fmeum]

Hey, thanks for your interest in Jazzer and for sharing your findings with it! I will update the findings list.

For the future: If you decide that a bug you find should be considered a vulnerability, please disclose it only after the maintainers of the affected project have fixed the issue (or at least had a reasonable amount of time to do so).

[GanbaruTobi]

Indeed. Provided a fix for them.