Vulnerabilities

search
ID
Packages
Summary
Published
arrow_upward
Attributes
GHSA-7hhh-6rmp-j9qf
  • Maven/com.fasterxml.jackson.core:jackson-core
  • Maven/tools.jackson.core:jackson-core
 jackson-core: UTF8DataInputJsonParser._reportInvalidToken() missing maxErrorTokenLength limit -> unbounded StringBuilder growth (DoS) 01 Oct
  • Fix available
  • Severity - 7.5 (High)
GHSA-p6pp-m3f8-5c89
  • Maven/com.fasterxml.jackson.core:jackson-core
  • Maven/tools.jackson.core:jackson-core
 jackson-core: ReDoS: quadratic backtracking in NumberInput.PATTERN_FLOAT via looksLikeValidNumber() 01 Oct
  • Fix available
  • Severity - 7.5 (High)
GHSA-r7wm-3cxj-wff9
  • Maven/com.fasterxml.jackson.core:jackson-core
  • Maven/tools.jackson.core:jackson-core
 jackson-core: Async parser maxNumberLength bypass via chunked digit accumulation (incomplete fix for GHSA-72hv-8253-57qq) 21 Jul
  • Fix available
  • Severity - 8.7 (High)
GHSA-72hv-8253-57qq
  • Maven/com.fasterxml.jackson.core:jackson-core
  • Maven/tools.jackson.core:jackson-core
 jackson-core: Number Length Constraint Bypass in Async Parser Leads to Potential DoS Condition 28 Feb
  • Fix available
  • Severity - 6.9 (Medium)
GHSA-h46c-h94j-95f3
  • Maven/com.fasterxml.jackson.core:jackson-core
 jackson-core can throw a StackoverflowError when processing deeply nested data 27 Jun 2025
  • Fix available
  • Severity - 8.7 (High)
GHSA-wf8f-6423-gfxg
  • Maven/com.fasterxml.jackson.core:jackson-core
 Jackson-core Vulnerable to Memory Disclosure via Source Snippet in JsonLocation 07 Jun 2025
  • Fix available
  • Severity - 4.0 (Medium)