Important: jackson-core

Issue Overview: The non-blocking asynchronous JSON parser in jackson-core does not enforce the maxNumberLength constraint defined in StreamReadConstraints default: 1000 characters. An attacker able to submit JSON to an application that uses the async parser API can supply a number token of...

CVE-2025-29868

Private Data Structure Returned From A Public Method vulnerability in Apache Answer. This issue affects Apache Answer: through 1.4.2. If a user uses an externally referenced image, when a user accesses this image, the provider of the image may obtain private information about the ip address of th...

CVE-2025-29868 Apache Answer: Using externally referenced images can leak user privacy.

Private Data Structure Returned From A Public Method vulnerability in Apache Answer. This issue affects Apache Answer: through 1.4.2. If a user uses an externally referenced image, when a user accesses this image, the provider of the image may obtain private information about the ip address of th...

CVE-2025-29868

creationtimestamp| type| source ---|---|--- 2025-04-01 04:56:30+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3llq3i46cmg2m 2025-04-01 08:32:32+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/9866 2025-04-01 11:57:26+00:00| seen| https://t.me/cvedetector/21739 2025-04-02...