2 matches found
Medium: jackson-databind
Issue Overview: jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor. From 2.13.0 until 2.14.0, a potential Denial-of-Service exists when attacker sends deeply nested JSON if and only if the service reads deeply nested 1000s of levels...
7.5CVSS5.3AI score0.00459EPSS
SaveExploits1
20