Lucene search
+L

45 matches found

osv_pysec
osv_pysec
•added 2026/03/18 4:17 a.m.•22 views

PYSEC-2026-2263

pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.3, the pyasn1 library is vulnerable to a Denial of Service DoS attack caused by uncontrolled recursion when decoding ASN.1 data with deeply nested structures. An attacker can supply a crafted payload containing thousands of nested SEQUENC...

7.5CVSS6.4AI score0.00968EPSS
SaveExploits1References4
RedHat Linux
RedHat Linux
•added 2026/01/19 12:18 a.m.•13 views

com.fasterxml.jackson.core/jackson-core: jackson-core Potential StackoverflowError

A nested data handling flaw was found in Jackson Core. When parsing particularly deeply nested data structures, a StackoverflowError can occur...

8.7CVSS6.6AI score0.00772EPSS
SaveExploits0References6
EUVD
EUVD
•added 2025/10/20 9:30 p.m.•27 views

EUVD-2025-35111

Denial-of-analysis in reporting/mongodb.py and reporting/jsondump.py in CAPEv2 commit 52e4b43, on 2025-05-17 allows attackers who can submit samples to cause incomplete or missing behavioral analysis reports by generating deeply nested or oversized behavior data that trigger MongoDB BSON limits o...

5.8AI score0.00358EPSS
SaveExploits1References4
RedHat Linux
RedHat Linux
•added 2025/09/11 7:39 p.m.•17 views

com.fasterxml.jackson.core/jackson-core: jackson-core Potential StackoverflowError

A nested data handling flaw was found in Jackson Core. When parsing particularly deeply nested data structures, a StackoverflowError can occur...

8.7CVSS6.6AI score0.00772EPSS
SaveExploits0References6
RedHat Linux
RedHat Linux
•added 2025/08/20 4:16 a.m.•10 views

com.fasterxml.jackson.core/jackson-core: jackson-core Potential StackoverflowError

A nested data handling flaw was found in Jackson Core. When parsing particularly deeply nested data structures, a StackoverflowError can occur...

8.7CVSS6.6AI score0.00772EPSS
SaveExploits0References6
RedHat Linux
RedHat Linux
•added 2025/08/20 12:22 a.m.•18 views

com.fasterxml.jackson.core/jackson-core: jackson-core Potential StackoverflowError

A nested data handling flaw was found in Jackson Core. When parsing particularly deeply nested data structures, a StackoverflowError can occur...

8.7CVSS6.6AI score0.00772EPSS
SaveExploits0References6
RedHat Linux
RedHat Linux
•added 2025/07/30 9:53 a.m.•14 views

com.fasterxml.jackson.core/jackson-core: jackson-core Potential StackoverflowError

A nested data handling flaw was found in Jackson Core. When parsing particularly deeply nested data structures, a StackoverflowError can occur...

8.7CVSS6.6AI score0.00772EPSS
SaveExploits0References6
RedHat Linux
RedHat Linux
•added 2025/07/30 9:49 a.m.•14 views

com.fasterxml.jackson.core/jackson-core: jackson-core Potential StackoverflowError

A nested data handling flaw was found in Jackson Core. When parsing particularly deeply nested data structures, a StackoverflowError can occur...

8.7CVSS6.6AI score0.00772EPSS
SaveExploits0References6
RedHat Linux
RedHat Linux
•added 2025/07/30 9:45 a.m.•16 views

com.fasterxml.jackson.core/jackson-core: jackson-core Potential StackoverflowError

A nested data handling flaw was found in Jackson Core. When parsing particularly deeply nested data structures, a StackoverflowError can occur...

8.7CVSS6.6AI score0.00772EPSS
SaveExploits0References6
RedHat Linux
RedHat Linux
•added 2025/07/21 5:07 p.m.•14 views

com.fasterxml.jackson.core/jackson-core: jackson-core Potential StackoverflowError

A nested data handling flaw was found in Jackson Core. When parsing particularly deeply nested data structures, a StackoverflowError can occur...

8.7CVSS6.6AI score0.00772EPSS
SaveExploits0References6
RedHat Linux
RedHat Linux
•added 2025/07/01 2:56 p.m.•11 views

com.fasterxml.jackson.core/jackson-core: jackson-core Potential StackoverflowError

A nested data handling flaw was found in Jackson Core. When parsing particularly deeply nested data structures, a StackoverflowError can occur...

8.7CVSS6.6AI score0.00772EPSS
SaveExploits0References6
RedHat Linux
RedHat Linux
•added 2025/07/01 2:30 p.m.•12 views

com.fasterxml.jackson.core/jackson-core: jackson-core Potential StackoverflowError

A nested data handling flaw was found in Jackson Core. When parsing particularly deeply nested data structures, a StackoverflowError can occur...

8.7CVSS6.6AI score0.00772EPSS
SaveExploits0References6
osv_ghsa
osv_ghsa
•added 2025/06/27 3:22 p.m.•9 views

GHSA-H46C-H94J-95F3 jackson-core can throw a StackoverflowError when processing deeply nested data

Impact With older versions of jackson-core, if you parse an input file and it has deeply nested data, Jackson could end up throwing a StackoverflowError if the depth is particularly large. Patches jackson-core 2.15.0 contains a configurable limit for how deep Jackson will traverse in an input...

8.7CVSS6.5AI score0.00772EPSS
SaveExploits0References4
Github Security Blog
Github Security Blog
•added 2025/06/27 3:22 p.m.•18 views

jackson-core can throw a StackoverflowError when processing deeply nested data

Impact With older versions of jackson-core, if you parse an input file and it has deeply nested data, Jackson could end up throwing a StackoverflowError if the depth is particularly large. Patches jackson-core 2.15.0 contains a configurable limit for how deep Jackson will traverse in an input...

8.7CVSS6.5AI score0.00772EPSS
SaveExploits0References4Affected Software1
Cvelist
Cvelist
•added 2025/06/25 5:02 p.m.•25 views

CVE-2025-52999 jackson-core Has Potential for StackoverflowError if user parses an input file that contains very deeply nested data

jackson-core contains core low-level incremental "streaming" parser and generator abstractions used by Jackson Data Processor. In versions prior to 2.15.0, if a user parses an input file and it has deeply nested data, Jackson could end up throwing a StackoverflowError if the depth is particularly...

8.7CVSS0.00772EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2025/06/25 5:02 p.m.•4 views

CVE-2025-52999 jackson-core Has Potential for StackoverflowError if user parses an input file that contains very deeply nested data

jackson-core contains core low-level incremental "streaming" parser and generator abstractions used by Jackson Data Processor. In versions prior to 2.15.0, if a user parses an input file and it has deeply nested data, Jackson could end up throwing a StackoverflowError if the depth is particularly...

8.7CVSS6.4AI score0.00772EPSS
SaveExploits0References2
CVE
CVE
•added 2025/06/25 5:02 p.m.•267 views

CVE-2025-52999

CVE-2025-52999 concerns Jackson Core: in versions before 2.15.0, parsing input with deeply nested data can trigger a StackOverflowError. Jackson-core 2.15.0 introduces a configurable depth limit (default 1000) and throws StreamConstraintsException when exceeded. Jackson-databind benefits from thi...

8.7CVSS6.4AI score0.00772EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/06/25 12:00 a.m.•4 views

CVE-2025-52999: Stack-based Buffer Overflow

jackson-core contains core low-level incremental "streaming" parser and generator abstractions used by Jackson Data Processor. In versions prior to 2.15.0, if a user parses an input file and it has deeply nested data, Jackson could end up throwing a StackoverflowError if the depth is particularly...

8.7CVSS6.5AI score0.00772EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/06/25 12:00 a.m.•10 views

FasterXML jackson-core security vulnerability

FasterXML jackson-core is a FasterXML open source API software. A security vulnerability exists in FasterXML jackson-core versions prior to 2.15.0, which stems from a potential stack overflow when processing deeply nested data...

8.7CVSS6.6AI score0.00772EPSS
SaveExploits0References8
RedHat Linux
RedHat Linux
•added 2025/02/10 1:06 a.m.•10 views

encoding/gob: golang: Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion

A flaw was found in the encoding/gob package of the Golang standard library. Calling Decoder.Decoding, a message that contains deeply nested structures, can cause a panic due to stack exhaustion. This is a follow-up to CVE-2022-30635...

7.5CVSS6.6AI score0.01127EPSS
SaveExploits0References8
Rows per page
Query Builder