CVE-2026-106554

The jackson-dataformat-cbor module in jackson-dataformats-binary is vulnerable to an algorithmic-complexity denial of service (CWE-407) . An attacker can exploit an unbounded run of CBOR tags in the CBORParser.java file; because the TagList backing array grows by a fixed increment (+8) instead of...