CVE-2026-110747

A flaw was found in jackson-dataformat-protobuf. A remote attacker can trigger a Denial of Service DoS by sending a specially crafted Protocol Buffers protobuf message. An integer overflow in length validation allows malformed map entry keys with excessively large declared lengths to bypass size...