Lucene search
+L

1 matches found

OSV
OSV
added 2022/10/03 12:0 a.m.15 views

GHSA-JJJH-JJXP-WPFF Uncontrolled Resource Consumption in Jackson-databind

In FasterXML jackson-databind 2.4.0-rc1 until 2.12.7.1 and in 2.13.x before 2.13.4.2 resource exhaustion can occur because of a lack of a check in primitive value deserializers to avoid deep wrapper array nesting, when the UNWRAPSINGLEVALUEARRAYS feature is enabled. This was patched in 2.12.7.1,...

7.5CVSS6.9AI score0.02706EPSS
SaveExploits2References18
Rows per page
Query Builder