ROOT-APP-MAVEN-CVE-2022-42003 CVE-2022-42003 in com.fasterxml.jackson.core:jackson-databind - Patched by Root

Root has patched CVE-2022-42003 in the com.fasterxml.jackson.core:jackson-databind package for Root:Maven. Multiple fixed versions available...

CVE-2022-42003

creationtimestamp| type| source ---|---|--- 2024-02-08 09:11:55+00:00| seen| https://t.me/ctinow/181235 2024-02-08 09:11:56+00:00| seen| https://t.me/ctinow/181236 2024-02-08 09:41:27+00:00| seen| https://t.me/ctinow/181247 2024-02-08 12:36:47+00:00| seen| https://t.me/ctinow/181338 2024-02-08...

CVE-2022-42003

In FasterXML jackson-databind before versions 2.13.4.1 and 2.12.17.1, resource exhaustion can occur because of a lack of a check in primitive value deserializers to avoid deep wrapper array nesting, when the UNWRAPSINGLEVALUEARRAYS feature is enabled...