3342 matches found
jackson-databind quadratic forward-reference completion
Summary When an @JsonIdentityInfo collection or map first creates N unresolved object-ID references and later resolves the same IDs in reverse order, jackson-databind scans the remaining pending-reference accumulator for each resolution. A shallow JSON document whose size grows linearly can...
7.5CVSS5.8AI score0.0045EPSS
SaveExploits0References11Affected Software2
20