Denial Of Service

🗓️ 24 Aug 2026 07:31:06Reported by Veracode Vulnerability DatabaseType

veracode🔗 sca.analysiscenter.veracode.com👁 24 Views

DoS in Jackson Core as NonBlockingUtf8JsonParserBase fails to enforce maxNumberLength.

Reporter	Title	Published	Views	Family All 1000
IBM Security Bulletins	Security Bulletin: IBM SPSS Modeler is affected by multiple vulnerabilities in Jackson Core	15 Oct 202616:58	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Terracotta is affected by jackson-core vulnerabilities that could allow an attacker to crash the JVM or exhaust server resources, causing a denial of service (DoS)	26 Oct 202620:08	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Terracotta is affected by jackson-core vulnerabilities that could allow attackers to trigger a denial of service via memory or CPU exhaustion by supplying arbitrarily long numbers	10 Sep 202616:34	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities affect Data Virtualization on IBM Software Hub (September 2026 - Part 1 of 2)	7 Oct 202622:51	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in jackson-core affects IBM watsonx Assistant Cartridge and IBM watsonx Orchestrate with watsonx Assistant Cartridge.	2 Nov 202614:09	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Engineering Lifecycle Optimization - Engineering Publishing affected by a Denial of Service vulnerability in Jackson Core (CVE-2026-18401)	16 Oct 202606:50	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in jackson-databind impact IBM License Key Server Administration and Reporting Tool and IBM LKS Administration Agent	2 Sep 202605:14	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Sterling External Authentication Server is vulnerable to multiple issues	9 Oct 202604:46	–	ibm
IBM Security Bulletins	Security Bulletin: Uncontrolled Resource Consumption Security Vulnerability in Jackson-core Affects IBM Sterling B2B Integrator and IBM Sterling File Gateway (CVE-2026-0003)	15 Sep 202618:39	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple secuirty vulnerabilities addressed with IBM Business Automation Workflow traditional and containers September 2026	2 Oct 202617:05	–	ibm

Vulners

Node

fasterxml jackson-coreRange2.0.0-RC1–2.18.7java

fasterxml jackson-coreRange2.19.0-rc1–2.21.3java

fasterxml jackson-coreRange3.0.0-rc1–3.1.3java

Source	Link
github	www.github.com/FasterXML/jackson-core/commit/4cdd529749da396cc7edf6d4a2aad41d47902641
github	www.github.com/FasterXML/jackson-core/pull/1611
github	www.github.com/FasterXML/jackson-core/security/advisories/GHSA-r7wm-3cxj-wff9
github	www.github.com/FasterXML/jackson-core/commit/050b429804dce2a7e08f0be1b0b4c3d040fdb9cd
github	www.github.com/advisories/GHSA-72hv-8253-57qq
github	www.github.com/FasterXML/jackson-core/commit/c5941e5aae7fd5aeac55d66933cfb82b9aabeef8
cve	www.cve.org/CVERecord

24 Aug 2026 07:39Current

6.1Medium risk

Vulners AI Score6.1

CVSS 48.7

EPSS0.00463

SSVC