jackson-jaxrs-json-provider vulnerabilities (AlmaLinux)
19 vulnerabilities.
-
jackson-jaxrs-json-providerAlmaLinux jackson-core: Delayed maxNameLength enforcement for char-backed input (ReaderBasedJsonParser) allows memory-exhaustion denial of service 7.5 High -
jackson-jaxrs-json-providerAlmaLinux jackson-databind: quadratic forward-reference completion in Collection and Map deserializers 7.5 High -
jackson-jaxrs-json-providerAlmaLinux jackson-core: UTF8DataInputJsonParser._reportInvalidToken() does not honor maxErrorTokenLength, allowing unbounded StringBuilder growth 7.5 High -
jackson-jaxrs-json-providerAlmaLinux jackson-databind: Array subtype allowlist bypass in BasicPolymorphicTypeValidator (allowIfSubTypeIsArray) 8.1 High -
jackson-jaxrs-json-providerAlmaLinux jackson-core Has Potential for StackoverflowError if user parses an input file that contains very deeply nested data 8.7 High -
jackson-jaxrs-json-providerAlmaLinux Deeply nested json in jackson-databind 7.5 High -
jackson-jaxrs-json-providerAlmaLinux jackson-databind mishandles the interaction between serialization gadgets and typing 8.8 High -
jackson-jaxrs-json-providerAlmaLinux jackson-databind mishandles the interaction between serialization gadgets and typing 8.8 High -
jackson-jaxrs-json-providerAlmaLinux jackson-databind mishandles the interaction between serialization gadgets and typing 9.8 Critical -
jackson-jaxrs-json-providerAlmaLinux jackson-databind mishandles the interaction between serialization gadgets and typing 9.8 Critical -
jackson-jaxrs-json-providerAlmaLinux jackson-databind mishandles the interaction between serialization gadgets and typing 9.8 Critical -
jackson-jaxrs-json-providerAlmaLinux Deserialization of Untrusted Data in jackson-databind 9.8 Critical -
jackson-jaxrs-json-providerAlmaLinux Deserialization of Untrusted Data in jackson-databind 9.8 Critical -
jackson-jaxrs-json-providerAlmaLinux jackson-databind polymorphic typing issue 9.8 Critical -
jackson-jaxrs-json-providerAlmaLinux jackson-databind polymorphic typing issue 9.8 Critical -
jackson-jaxrs-json-providerAlmaLinux Polymorphic Typing in FasterXML jackson-databind 9.8 Critical -
jackson-jaxrs-json-providerAlmaLinux Polymorphic Typing issue in FasterXML jackson-databind 9.8 Critical -
jackson-jaxrs-json-providerAlmaLinux Polymorphic Typing issue in FasterXML jackson-databind 9.8 Critical -
jackson-jaxrs-json-providerAlmaLinux Deserialization of Untrusted Data in FasterXML jackson-databind 5.9 Medium