Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
CVE-2022-40156: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. Reason: This CVE has been rejected as it was incorrectly assigned. All references and descriptions in this candidate have been removed to prevent ...
CVE-2022-40156 · published 4 years ago
Summary
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. Reason: This CVE has been rejected as it was incorrectly assigned. All references and descriptions in this candidate have been removed to prevent accidental usage.
What to do
- Update fasterxml com.fasterxml.woodstox:woodstox-core to version 6.4.0.
- Update fasterxml com.fasterxml.woodstox:woodstox-core to version 5.4.0.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| maven | fasterxml | com.fasterxml.woodstox:woodstox-core |
>= 6.0.0, < 6.4.0 < 5.4.0 Fix: upgrade to 6.4.0
|
Original advisory text
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. Reason: This CVE has been rejected as it was incorrectly assigned. All references and descriptions in this candidate have been removed to prevent ...
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. Reason: This CVE has been rejected as it was incorrectly assigned. All references and descriptions in this candidate have been removed to prevent accidental usage.
References
- https://nvd.nist.gov/vuln/detail/CVE-2022-40156
- https://github.com/x-stream/xstream/issues/304
- https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50841
- https://github.com/FasterXML/woodstox/issues/157
- https://github.com/FasterXML/woodstox/issues/160
- https://github.com/FasterXML/woodstox/pull/159
- https://github.com/advisories/GHSA-4rv7-wj6m-6c6r
Timeline
Published16 Sep 2022
Updated7 Mar 2026
First seen6 Mar 2026
Track software like this
Free during beta