175 matches found
Allocation of Resources Without Limits or Throttling
Overview Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling in CBORParser.decodeLongerName, CBORParser.decodeChunkedName, and SmileParser.handleLongFieldName, which accumulate a decoded property name without applying the maxNameLength constrai...
ch.rasc:wamp2spring-core (4.0.0), ch.rasc:wamp2spring-reactive (4.0.0) +703 more potentially affected by CVE-2026-68495 via tools.jackson.dataformat:jackson-dataformat-cbor (>=3.0.0-rc1, <=3.1.5)
tools.jackson.dataformat:jackson-dataformat-cbor MAVEN version =3.0.0-rc1, =6.0.1, =4.1.0.1, =4.1.0.1, =4.1.0.1, =4.1.0.1, =4.1.0.1, =4.1.0.1, =4.1.0.1, =4.1.1.1 and more Source cves: CVE-2026-68495 Source advisory: SNYK:JAVA-TOOLSJACKSONDATAFORMAT-20416728...
com.erudika:para-search-elasticsearch (>=1.43.1, <=1.43.2), com.webauthn4j:webauthn4j-appattest (>=0.31.9.release, <=0.31.10.release) +393 more potentially affected by CVE-2026-68495 via tools.jackson.dataformat:jackson-dataformat-cbor (>=3.2.0, <=3.2.1)
tools.jackson.dataformat:jackson-dataformat-cbor MAVEN version =3.2.0, =1.43.1, =0.31.9.release, =0.31.9.release, =0.31.9.release, =0.31.9.release, =0.31.9.release, =0.31.9.release, =8.0.0-rc6, =8.0.0-rc6, =8.0.0-rc6, =8.0.0-rc6, =8.0.0-rc6, =8.0.0-rc6, =8.0.0-rc6, =8.0.2 and more Source cves:...
com.amazonaws:athena-aws-cmdb (>=2026.28.1, <=2026.40.1), com.amazonaws:athena-cloudwatch (>=2026.28.1, <=2026.40.1) +196 more potentially affected by CVE-2026-68495 via com.fasterxml.jackson.dataformat:jackson-dataformat-cbor (>=2.22.0, <=2.22.1)
com.fasterxml.jackson.dataformat:jackson-dataformat-cbor MAVEN version =2.22.0, =2026.28.1, =2026.28.1, =2026.28.1, =2026.28.1, =2026.28.1, =2.4.0, =2.4.0, =2.4.0, =2.4.0, =2.4.0, =2.22.0, =2.22.0, =0.11.0, =0.132.0, =0.142.0 and more Source cves: CVE-2026-68495 Source advisory:...
ai.fastllm:agent-bridge_3 (>=0.3.0, <=0.5.7), ai.fastllm:agent-checkpoint-git_3 (>=0.3.0, <=0.5.7) +1836 more potentially affected by CVE-2026-68495 via com.fasterxml.jackson.dataformat:jackson-dataformat-cbor (>=2.19.0-rc2, <=2.21.5)
com.fasterxml.jackson.dataformat:jackson-dataformat-cbor MAVEN version =2.19.0-rc2, =0.3.0, =0.3.0, =0.3.0, =0.3.0, =0.3.0, =0.3.0, =0.3.0, =0.3.0, =0.3.0, =0.3.0, =0.3.0, =0.3.0, =0.3.0, =0.5.7 - ai.fastllm:runtime-roster3 0.5.7 - app.perawallet.xhdwalletapi:xhdwalletapi-shared 1.2.0 and more...
ai.tock:bot-test (>=24.9.0, <=26.3.4), ai.tock:bot-test-base (>=24.9.0, <=26.3.4) +2473 more potentially affected by CVE-2026-68495 via com.fasterxml.jackson.dataformat:jackson-dataformat-cbor (>=2.16.0, <=2.18.9)
com.fasterxml.jackson.dataformat:jackson-dataformat-cbor MAVEN version =2.16.0, =24.9.0, =24.9.0, =24.9.0, =24.9.0, =24.9.5, =24.9.0, =24.9.0, =24.9.0, =24.9.0, =24.9.0, =24.9.0, =24.9.0, =24.9.0, =24.9.0, =24.9.0, =26.3.4 and more Source cves: CVE-2026-68495 Source advisory:...
Allocation of Resources Without Limits or Throttling
Overview Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling in CBORParser.decodeLongerName, CBORParser.decodeChunkedName, and SmileParser.handleLongFieldName, which accumulate a decoded property name without applying the maxNameLength constrai...
br.com.sawcunhaos:scos-foundation-audit (>=1.0.0, <=1.1.0), br.com.sawcunhaos:scos-foundation-exception (>=1.0.0, <=1.1.0) +420 more potentially affected by CVE-2026-68496 via tools.jackson.dataformat:jackson-dataformat-smile (>=3.0.0-rc1, <=3.1.5)
tools.jackson.dataformat:jackson-dataformat-smile MAVEN version =3.0.0-rc1, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.42.4, =1.9.0-rc.1, =1.9.0-rc.11 and more Source cves: CVE-2026-68496 Source advisory: SNYK:JAVA-TOOLSJACKSONDATAFORMAT-20416726...
com.erudika:para-search-elasticsearch (>=1.43.1, <=1.43.2), com.netflix.atlas_v1:atlas-chart_2.13 (>=1.9.0-rc.12, <=1.9.0-rc.20) +479 more potentially affected by CVE-2026-68496 via tools.jackson.dataformat:jackson-dataformat-smile (>=3.2.0, <=3.2.1)
tools.jackson.dataformat:jackson-dataformat-smile MAVEN version =3.2.0, =1.43.1, =1.9.0-rc.12, =1.9.0-rc.12, =1.9.0-rc.12, =1.9.0-rc.12, =1.9.0-rc.12, =1.9.0-rc.12, =1.9.0-rc.12, =1.9.0-rc.12, =1.9.0-rc.12, =1.9.0-rc.12, =1.9.0-rc.12, =1.9.0-rc.12, =1.9.0-rc.12, =1.9.0-rc.12, =1.9.0-rc.20 and mor...
ai.timefold.solver:timefold-solver-migration (>=2.4.0-rc-1, <=2.6.0), com.buession.cas:cas-server-support-captcha (5.0.0) +190 more potentially affected by CVE-2026-68496 via com.fasterxml.jackson.dataformat:jackson-dataformat-smile (>=2.22.0, <=2.22.1)
com.fasterxml.jackson.dataformat:jackson-dataformat-smile MAVEN version =2.22.0, =2.4.0-rc-1, =2.22.0, =2.22.0, =0.132.0, =6.4.0, =6.4.0, =6.4.0, =8.40.0, =8.40.0, =8.40.0, =8.40.0, =8.40.0, =8.40.0, =8.42.0 - com.palantir.conjure.java:conjure-java-undertow-runtime...
ai.timefold.solver:timefold-solver-migration (>=1.24.0, <=2.3.0), ch.admin.bit.jeap.openrewrite.recipe:jeap-rewrite-recipes (>=1.5.1, <=1.5.6) +953 more potentially affected by CVE-2026-68496 via com.fasterxml.jackson.dataformat:jackson-dataformat-smile (>=2.19.0-rc2, <=2.21.5)
com.fasterxml.jackson.dataformat:jackson-dataformat-smile MAVEN version =2.19.0-rc2, =1.24.0, =1.5.1, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =2.0.59, =1.41.5, =1.43.1 and more Source cves: CVE-2026-68496 Source advisory: SNYK:JAVA-COMFASTERXMLJACKSONDATAFORMAT-20416725...
ai.timefold.solver:timefold-solver-migration (>=1.7.0, <=1.23.0), com.alibaba.fastjson2:fastjson2-extension-spring5 (>=2.0.43, <=2.0.58) +1084 more potentially affected by CVE-2026-68496 via com.fasterxml.jackson.dataformat:jackson-dataformat-smile (>=2.16.0, <=2.18.9)
com.fasterxml.jackson.dataformat:jackson-dataformat-smile MAVEN version =2.16.0, =1.7.0, =2.0.43, =0.0.23, =0.0.2, =0.0.11, =1.0.0, =0.0.3, =0.0.3, =1.41.0, =1.49.1, =1.49.1, =1.50.6 and more Source cves: CVE-2026-68496 Source advisory: SNYK:JAVA-COMFASTERXMLJACKSONDATAFORMAT-20416725...
Allocation of Resources Without Limits or Throttling
Overview Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling in CBORParser.decodeLongerName, CBORParser.decodeChunkedName, and SmileParser.handleLongFieldName, which accumulate a decoded property name without applying the maxNameLength constrai...
Allocation of Resources Without Limits or Throttling
Overview Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling in CBORParser.decodeLongerName, CBORParser.decodeChunkedName, and SmileParser.handleLongFieldName, which accumulate a decoded property name without applying the maxNameLength constrai...
br.com.sawcunhaos:scos-foundation-audit (>=1.0.0, <=1.1.0), br.com.sawcunhaos:scos-foundation-exception (>=1.0.0, <=1.1.0) +420 more potentially affected by CVE-2026-68496 via tools.jackson.dataformat:jackson-dataformat-smile (>=3.0.0, <=3.1.5)
tools.jackson.dataformat:jackson-dataformat-smile MAVEN version =3.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.42.4, =1.9.0-rc.1, =1.9.0-rc.11 and more Source cves: CVE-2026-68496 Source advisory: MEND:CVE-2026-68496...
com.erudika:para-search-elasticsearch (>=1.43.1, <=1.43.2), com.netflix.atlas_v1:atlas-chart_2.13 (>=1.9.0-rc.12, <=1.9.0-rc.20) +479 more potentially affected by CVE-2026-68496 via tools.jackson.dataformat:jackson-dataformat-smile (>=3.2.0, <=3.2.1)
tools.jackson.dataformat:jackson-dataformat-smile MAVEN version =3.2.0, =1.43.1, =1.9.0-rc.12, =1.9.0-rc.12, =1.9.0-rc.12, =1.9.0-rc.12, =1.9.0-rc.12, =1.9.0-rc.12, =1.9.0-rc.12, =1.9.0-rc.12, =1.9.0-rc.12, =1.9.0-rc.12, =1.9.0-rc.12, =1.9.0-rc.12, =1.9.0-rc.12, =1.9.0-rc.12, =1.9.0-rc.20 and mor...
ai.timefold.solver:timefold-solver-migration (>=1.24.0, <=2.3.0), ch.admin.bit.jeap.openrewrite.recipe:jeap-rewrite-recipes (>=1.5.1, <=1.5.6) +953 more potentially affected by CVE-2026-68496 via com.fasterxml.jackson.dataformat:jackson-dataformat-smile (>=2.19.0, <=2.21.5)
com.fasterxml.jackson.dataformat:jackson-dataformat-smile MAVEN version =2.19.0, =1.24.0, =1.5.1, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =2.0.59, =1.41.5, =1.43.1 and more Source cves: CVE-2026-68496 Source advisory: MEND:CVE-2026-68496...
ai.timefold.solver:timefold-solver-migration (>=2.4.0-rc-1, <=2.6.0), com.buession.cas:cas-server-support-captcha (5.0.0) +190 more potentially affected by CVE-2026-68496 via com.fasterxml.jackson.dataformat:jackson-dataformat-smile (>=2.22.0, <=2.22.1)
com.fasterxml.jackson.dataformat:jackson-dataformat-smile MAVEN version =2.22.0, =2.4.0-rc-1, =2.22.0, =2.22.0, =0.132.0, =6.4.0, =6.4.0, =6.4.0, =8.40.0, =8.40.0, =8.40.0, =8.40.0, =8.40.0, =8.40.0, =8.42.0 - com.palantir.conjure.java:conjure-java-undertow-runtime...
ai.timefold.solver:timefold-solver-migration (>=1.7.0, <=1.23.0), com.alibaba.fastjson2:fastjson2-extension-spring5 (>=2.0.43, <=2.0.58) +1084 more potentially affected by CVE-2026-68496 via com.fasterxml.jackson.dataformat:jackson-dataformat-smile (>=2.16.0, <=2.18.9)
com.fasterxml.jackson.dataformat:jackson-dataformat-smile MAVEN version =2.16.0, =1.7.0, =2.0.43, =0.0.23, =0.0.2, =0.0.11, =1.0.0, =0.0.3, =0.0.3, =1.41.0, =1.49.1, =1.49.1, =1.50.6 and more Source cves: CVE-2026-68496 Source advisory: MEND:CVE-2026-68496...
ch.rasc:wamp2spring-core (4.0.0), ch.rasc:wamp2spring-reactive (4.0.0) +703 more potentially affected by CVE-2026-68495 via tools.jackson.dataformat:jackson-dataformat-cbor (>=3.0.0, <=3.1.5)
tools.jackson.dataformat:jackson-dataformat-cbor MAVEN version =3.0.0, =6.0.1, =4.1.0.1, =4.1.0.1, =4.1.0.1, =4.1.0.1, =4.1.0.1, =4.1.0.1, =4.1.0.1, =4.1.1.1 and more Source cves: CVE-2026-68495 Source advisory: MEND:CVE-2026-68495...