topic Re: tExtractJSONFields_2 - Malicious payload, having non natural depths on Studio 8.0.1 R2023-09 in Talend Studio

tExtractJSONFields_2 - Malicious payload, having non natural depths on Studio 8.0.1 R2023-09

AFM_DEV_GDE — Fri, 15 Nov 2024 21:19:19 GMT

Hello,

I'm facing an issue with tExtractJSONFields component.

With large JSON flow I get the error : net.minidev.json.parser.ParseException: Malicious payload, having non natural depths

This error it's pretty new, fews weeks maximum.

I found solutions to consist to update

json-smart library to 2.4.11 version but I already have this version as you can see on attached pic.

I don't know what to do.

Could you help me on this please ?

Thanks

Re: tExtractJSONFields_2 - Malicious payload, having non natural depths on Studio 8.0.1 R2023-09

Anonymous — Tue, 24 Oct 2023 01:05:01 GMT

Hello,

We are supposing that you have checked this KB article about:

https://community.talend.com/s/article/Jobs-using-tExtractJSONFields-fail-in-7-3-1-R2023-06-or-8-0-1-R2023-05-with-net-minidev-json-parser-ParseException?language=en_US

Is it working well for you to customize the maven URI to use the version 2.4.11 instead of 2.4.9 as described in the article and restart your studio to apply it?

https://help.talend.com/r/en-US/8.0/studio-user-guide/customizing-maven-uri-for-external-module-deployment

Best regards

Sabrina

Re: tExtractJSONFields_2 - Malicious payload, having non natural depths on Studio 8.0.1 R2023-09

AFM_DEV_GDE — Wed, 08 Nov 2023 10:20:48 GMT

Hello,

Yes I have checked this topic. As I said, I've already 2.4.11 version.

I've investigated with my coworkers and they don't have this issue. We have all the same repository, all the same library version, but I'm the only one who encounter this error.

I've tried to delete my workspace and create a new one, no changes.

New patch R2023-10 was installed few days ago, no changes.

I don't know what to try to change this situation.

Re: tExtractJSONFields_2 - Malicious payload, having non natural depths on Studio 8.0.1 R2023-09

Anonymous — Thu, 09 Nov 2023 09:49:27 GMT

Hello,

Is there any specific setting from your side? What java version are you using?

Could you please check classpath lib directory if have the old version?

Is it possible to use tlibraryLoad component to force to load 2.4.11 in your job?

Best regards

Sabrina

Re: tExtractJSONFields_2 - Malicious payload, having non natural depths on Studio 8.0.1 R2023-09

AFM_DEV_GDE — Wed, 15 Nov 2023 10:48:27 GMT

Hello,

I've tried to force the 2.4.11 library loading with tLibraryLoad but still doesn't work.

But when I did that, I saw other library with same name (json-smart 2.4.11b, 2.4.11bis, 2.4.11ter).

So I tried with json-smart 2.4.11ter library and issue is gone.

Therefore, in Modules section, I linked module json-smart-2.4.11.jar with Maven URI : mvn:net.minidev/json-smart/2.4.11ter/jar

Thanks for your help