Update dependency org.json:json to v20231013 [SECURITY]

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
org.json:json	20230618 -> 20231013

---

Denial of Service in JSON-Java

CVE-2023-5072 / GHSA-rm7j-f5g5-27vv

More information

Details

Denial of Service in JSON-Java versions prior to 20230618.  A bug in the parser means that an input string of modest size can lead to indefinite amounts of memory being used. 

Severity

• CVSS Score: 7.5 / 10 (High)
• Vector String: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

References

• https://nvd.nist.gov/vuln/detail/CVE-2023-5072
• https://github.com/stleary/JSON-java/issues/758
• https://github.com/stleary/JSON-java/issues/771
• https://github.com/stleary/JSON-java/pull/759
• https://github.com/stleary/JSON-java/commit/60662e2f8384d3449822a3a1179bfe8de67b55bb
• https://github.com/stleary/JSON-java

This data is provided by OSV and the GitHub Advisory Database (CC-BY 4.0).

---

Release Notes

douglascrockford/JSON-java (org.json:json)

v20231013

Compare Source

Pull Request	Description
#​793	Reverted #​761
#​792	update the docs for release 2023101
#​783	optLong vs getLong inconsistencies
#​782	Fix XMLTest.testIndentComplicatedJsonObjectWithArrayAndWithConfig() for Windows
#​779	add validity check for JSONObject constructors
#​778	Fix XMLTest.testIndentComplicatedJsonObjectWithArrayAndWithConfig() for Windows
#​776	Update [JUnit to version 4.13.2
#​774	Removing unneeded synchronization
#​773	Add optJSONArray method to JSONObject with a default value
#​772	Disallow nested objects and arrays as keys in objects
#​779	Unit test cleanup
#​769	Addressed Java 17 compile warnings
#​764	Update CodeQL action version
#​761	Add module-info
#​759	JSON parsing should detect embedded
#​753	Updated new object methods
#​752	Fixes possible unit test bug when compiling/testing on Windows

---

Configuration

📅 Schedule: Branch creation - "" (UTC), Automerge - "before 4am" (UTC).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate. View repository job log here.

[codecov]

Codecov Report

All modified lines are covered by tests ✅

Comparison is base (67b1a9a) 24.00% compared to head (8921038) 24.00%.

Additional details and impacted files

@@            Coverage Diff            @@
##               main      #33   +/-   ##
=========================================
  Coverage     24.00%   24.00%           
  Complexity      174      174           
=========================================
  Files            36       36           
  Lines           800      800           
  Branches         55       55           
=========================================
  Hits            192      192           
  Misses          607      607           
  Partials          1        1           

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.