CVE-2023-33546

Janino 3.1.9 and earlier are subject to denial of service (DOS) attacks when using the expression evaluator.guess parameter name method. If the parser runs on user-supplied input, an attacker could supply content that causes the parser to crash due to a stack overflow. NOTE: this is disputed by multiple parties because Janino is not intended for use with untrusted input.

• CWE-787

• https://github.com/janino-compiler/janino/issues/201Exploit, Issue Tracking, Third Party Advisory
• https://janino-compiler.github.io/janino/#security
• https://github.com/janino-compiler/janino/issues/201Exploit, Issue Tracking, Third Party Advisory
• https://janino-compiler.github.io/janino/#security

Published

Jun 1, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-33534A Cross-Site Request Forgery (CSRF) in Guanzhou Tozed Kangwe…8.8
• CVE-2023-33536TP-Link TL-WR940N V2/V4, TL-WR841N V8/V10, and TL-WR740N V1/…8.1
• CVE-2023-33537TP-Link TL-WR940N V2/V4, TL-WR841N V8/V10, and TL-WR740N V1/…8.1
• CVE-2023-33538TP-Link TL-WR940N V2/V4, TL-WR841N V8/V10, and TL-WR740N V1/…8.8
• CVE-2023-3354A flaw was found in the QEMU built-in VNC server. When a cli…7.5
• CVE-2023-33544hawtio 2.17.2 is vulnerable to Path Traversal. it is possibl…5.5
• CVE-2023-33548Cross Site Scripting (XSS) vulnerability in ASUS RT-AC51U wi…6.8
• CVE-2023-3355A NULL pointer dereference flaw was found in the Linux kerne…5.5
• CVE-2023-33551Heap Buffer Overflow in the erofsfsck_dirent_iter function i…7.8
• CVE-2023-33552Heap Buffer Overflow in the erofs_read_one_data function at …7.8
• CVE-2023-33553An issue in Planet Technologies WDRT-1800AX v1.01-CP21 allow…9.8
• CVE-2023-33556TOTOLink A7100RU V7.4cu.2313_B20191024 was discovered to con…9.8