Lucene search
+L

6 matches found

Snyk
Snyk
•added 2026/09/08 4:03 a.m.•13 views

Allocation of Resources Without Limits or Throttling

Overview Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling in the tokensFromInput method of TreePointer, which parses JSON Pointer segments with repeated substring calls that copy the remaining string each iteration On^2 and accumulates the...

6.9CVSS5.9AI score0.00701EPSS
SaveExploits0References2
NVD
NVD
•added 2026/09/08 3:17 a.m.•9 views

CVE-2026-86513

A security flaw has been discovered in java-json-tools jackson-coreutils 2.0. This vulnerability affects the function TreePointer.tokensFromInput of the file src/main/java/com/github/fge/jackson/jsonpointer/TreePointer.java of the component JSON Pointer parser. The manipulation results in...

6.9CVSS0.00701EPSS
SaveExploits0References6
Vulnrichment
Vulnrichment
•added 2026/09/08 2:30 a.m.•8 views

CVE-2026-86513 java-json-tools jackson-coreutils JSON Pointer parser TreePointer.java TreePointer.tokensFromInput allocation of resources

A security flaw has been discovered in java-json-tools jackson-coreutils 2.0. This vulnerability affects the function TreePointer.tokensFromInput of the file src/main/java/com/github/fge/jackson/jsonpointer/TreePointer.java of the component JSON Pointer parser. The manipulation results in...

6.9CVSS5.4AI score0.00701EPSS
SaveExploits0References6
EUVD
EUVD
•added 2026/09/08 2:30 a.m.•13 views

EUVD-2026-72614

A security flaw has been discovered in java-json-tools jackson-coreutils 2.0. This vulnerability affects the function TreePointer.tokensFromInput of the file src/main/java/com/github/fge/jackson/jsonpointer/TreePointer.java of the component JSON Pointer parser. The manipulation results in...

6.9CVSS5.4AI score0.00701EPSS
SaveExploits0References6
CVE
CVE
•added 2026/09/08 2:30 a.m.•34 views

CVE-2026-86513

A remote, unauthenticated resource allocation vulnerability exists in the JSON Pointer parser component of java-json-tools jackson-coreutils 2.0 , specifically in the TreePointer.tokensFromInput function within TreePointer.java. The flaw can be triggered remotely without authentication, resulting...

6.9CVSS5.4AI score0.00701EPSS
SaveExploits0References6
OSV
OSV
•added 2026/09/08 2:30 a.m.•13 views

CVE-2026-86513 java-json-tools jackson-coreutils JSON Pointer parser TreePointer.java TreePointer.tokensFromInput allocation of resources

A security flaw has been discovered in java-json-tools jackson-coreutils 2.0. This vulnerability affects the function TreePointer.tokensFromInput of the file src/main/java/com/github/fge/jackson/jsonpointer/TreePointer.java of the component JSON Pointer parser. The manipulation results in...

6.9CVSS5.3AI score
SaveExploits0References8
Rows per page
Query Builder