Lucene search
+L

11 matches found

OSV
OSV
added 2026/06/23 9:0 p.m.7 views

CVE-2026-50193 jackson-databind: Deeply nested JsonNode throws StackOverflowError for toString()

jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor. From 2.13.0 until 2.14.0, a potential Denial-of-Service exists when attacker sends deeply nested JSON if and only if the service reads deeply nested 1000s of levels JSON as JsonNode...

6.3CVSS6AI score0.00459EPSS
SaveExploits1References5
Rows per page
Query Builder