CLEANSTART-2026-OS16605 UTF8DataInputJsonParser

Security vulnerability affects the sonarqube package. UTF8DataInputJsonParser...

com.fasterxml.jackson.core/jackson-core: Jackson-core: Denial of Service via unbounded StringBuilder growth during malformed token processing

A flaw was found in FasterXML jackson-core. This vulnerability allows a remote attacker to cause a Denial of Service DoS by providing a specially crafted, malformed token to the JsonFactory.createParserDataInput method. The UTF8DataInputJsonParser component, responsible for handling DataInput...

com.fasterxml.jackson.core/jackson-core: Jackson-core: Denial of Service via unbounded StringBuilder growth during malformed token processing

A flaw was found in FasterXML jackson-core. This vulnerability allows a remote attacker to cause a Denial of Service DoS by providing a specially crafted, malformed token to the JsonFactory.createParserDataInput method. The UTF8DataInputJsonParser component, responsible for handling DataInput...

com.fasterxml.jackson.core/jackson-core: Jackson-core: Denial of Service via unbounded StringBuilder growth during malformed token processing

A flaw was found in FasterXML jackson-core. This vulnerability allows a remote attacker to cause a Denial of Service DoS by providing a specially crafted, malformed token to the JsonFactory.createParserDataInput method. The UTF8DataInputJsonParser component, responsible for handling DataInput...

com.fasterxml.jackson.core/jackson-core: Jackson-core: Denial of Service via unbounded StringBuilder growth during malformed token processing

A flaw was found in FasterXML jackson-core. This vulnerability allows a remote attacker to cause a Denial of Service DoS by providing a specially crafted, malformed token to the JsonFactory.createParserDataInput method. The UTF8DataInputJsonParser component, responsible for handling DataInput...

Security Bulletin: IBM Terracotta is affected by jackson-core vulnerabilities that could allow an attacker to crash the JVM or exhaust server resources, causing a denial of service (DoS)

Summary IBM Terracotta utilizes the jackson libraries for reading JSON input into tokens and writes Java data as JSON output along with JSON serialization and deserialization. Vulnerability Details CVEID:CVE-2026-89425 DESCRIPTION: UTF8DataInputJsonParser.reportInvalidToken in FasterXML...

com.fasterxml.jackson.core/jackson-core: Jackson-core: Denial of Service via unbounded StringBuilder growth during malformed token processing

A flaw was found in FasterXML jackson-core. This vulnerability allows a remote attacker to cause a Denial of Service DoS by providing a specially crafted, malformed token to the JsonFactory.createParserDataInput method. The UTF8DataInputJsonParser component, responsible for handling DataInput...

CLEANSTART-2026-IN74238 UTF8DataInputJsonParser

Security vulnerability affects the wildfly package. UTF8DataInputJsonParser...

CLEANSTART-2026-YE95301 UTF8DataInputJsonParser

CVE-2026-89425 affects multiple packages. UTF8DataInputJsonParser. See references for individual vulnerability details...

Security Bulletin: IBM SPSS Analytic Server is affected by a Jackson-core denial-of-service vulnerability that may cause excessive memory consumption through crafted JSON input

Summary IBM SPSS Analytic Server is affected by a Jackson-core denial-of-service vulnerability that may cause excessive memory consumption through crafted JSON input. his has been addressed in the remediation section. Vulnerability Details CVEID:CVE-2026-89425 DESCRIPTION:...

CLEANSTART-2026-RP24841 UTF8DataInputJsonParser

CVE-2026-89425 affects multiple packages. UTF8DataInputJsonParser. See references for individual vulnerability details...

Security Bulletin: SPSS Collaboration and Deployment Services is affected by multiple vulnerabilities in Jackson Core

Summary SPSS Collaboration and Deployment Services is affected by multiple vulnerabilities in Jackson Core. This has been addressed in the remediation section. Vulnerability Details CVEID:CVE-2026-89425 DESCRIPTION: UTF8DataInputJsonParser.reportInvalidToken in FasterXML jackson-core builds the...

com.fasterxml.jackson.core/jackson-core: Jackson-core: Denial of Service via unbounded StringBuilder growth during malformed token processing

A flaw was found in FasterXML jackson-core. This vulnerability allows a remote attacker to cause a Denial of Service DoS by providing a specially crafted, malformed token to the JsonFactory.createParserDataInput method. The UTF8DataInputJsonParser component, responsible for handling DataInput...

CLEANSTART-2026-GL73276 UTF8DataInputJsonParser

Security vulnerability affects the keycloak package. UTF8DataInputJsonParser...

jackson-core JSON Parser Heap Buffer Overflow DoS

The vulnerability of the UTF8DataInputJsonParser.reportInvalidToken function in the jackson-core library of the FasterXML project is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service failures...

CLEANSTART-2026-QN00727 UTF8DataInputJsonParser

Security vulnerability affects the apache-zookeeper package. UTF8DataInputJsonParser...

Security Bulletin: IBM SPSS Modeler is affected by a Jackson-core denial-of-service vulnerability that may cause excessive memory consumption from crafted JSON input

Summary IBM SPSS Modeler is affected by a Jackson-core denial-of-service vulnerability that may cause excessive memory consumption from crafted JSON input. This has been addressed in the remediation section. Vulnerability Details CVEID:CVE-2026-89425 DESCRIPTION:...

CLEANSTART-2026-EO55339 UTF8DataInputJsonParser

CVE-2026-89425 affects multiple packages. UTF8DataInputJsonParser. See references for individual vulnerability details...

CLEANSTART-2026-FJ64827 UTF8DataInputJsonParser

CVE-2026-89425 affects multiple packages. UTF8DataInputJsonParser. See references for individual vulnerability details...

Important: jackson-core

Issue Overview: NumberInput.looksLikeValidNumber in FasterXML jackson-core pre-validates "stringified numbers" with two regular expressions: PATTERNFLOAT +-?0-9\.?0-9+eE+-?0-9+?, present since 2.17.0, and PATTERNFLOATTRAILINGDOT, added in 2.17.2. PATTERNFLOAT places adjacent quantifiers over the...