CVE-2026-115876

Summary "YAMLAnchorReplayingParser" in "jackson-dataformat-yaml" available since 2.19.0 handles YAML merge keys "" through unbounded recursion. A crafted YAML document with approximately 3,271 levels of nested "" keys 20 KB triggers "StackOverflowError" on the parsing thread. Because...

WS-2026-0134

jackson-dataformat-yaml: StackOverflowError via deeply nested YAML merge keys in YAMLAnchorReplayingParser...