Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
added 2026/06/23 9:21 p.m.12 views

jackson-databind: Deeply nested JsonNode throws StackOverflowError for toString()

Impact Potential Denial-of-Service when attacker sends deeply nested JSON if and only if service: 1. Reads deeply nested 1000s of levels JSON as JsonNode ObjectMapper.readTree 2. Writes out same or modifided node using JsonNode.toString which can consume significant amount of resources with...

7.5CVSS5.8AI score0.00459EPSS
SaveExploits1References5Affected Software1
Rows per page
Query Builder