Lucene search
+L

1 matches found

OSV
OSV
added 2022/10/03 12:00 a.m.7 views

GHSA-RGV9-Q543-RQG4 Uncontrolled Resource Consumption in FasterXML jackson-databind

In FasterXML jackson-databind before 2.12.7.1 and in 2.13.x before 2.13.4, resource exhaustion can occur because of a lack of a check in BeanDeserializer.deserializeFromArray to prevent use of deeply nested arrays. This issue can only happen when the UNWRAPSINGLEVALUEARRAYS feature is explicitly...

8.2CVSS6.9AI score0.02766EPSS
SaveExploits1References12
Rows per page
Query Builder