Lucene search
+L

3342 matches found

Github Security Blog
Github Security Blog
•added 2026/09/30 3:37 p.m.•3 views

jackson-databind quadratic forward-reference completion

Summary When an @JsonIdentityInfo collection or map first creates N unresolved object-ID references and later resolves the same IDs in reverse order, jackson-databind scans the remaining pending-reference accumulator for each resolution. A shallow JSON document whose size grows linearly can...

7.5CVSS5.8AI score0.0045EPSS
SaveExploits0References11Affected Software2
Rows per page
Query Builder