pki-jackson-core vulnerabilities (AlmaLinux)
6 vulnerabilities.
-
pki-jackson-coreAlmaLinux jackson-core: UTF8DataInputJsonParser._reportInvalidToken() does not honor maxErrorTokenLength, allowing unbounded StringBuilder growth 7.5 High -
pki-jackson-coreAlmaLinux jackson-core: quadratic backtracking in NumberInput.PATTERN_FLOAT via looksLikeValidNumber() enables ReDoS 7.5 High -
pki-jackson-coreAlmaLinux jackson-databind: unbounded numeric parse in Duration and XMLGregorianCalendar deserialization allows CPU denial of service 7.5 High -
pki-jackson-coreAlmaLinux jackson-databind: PolymorphicTypeValidator bypass via generic type parameters allows arbitrary class instantiation 8.1 High -
pki-jackson-coreAlmaLinux jackson-databind: Array subtype allowlist bypass in BasicPolymorphicTypeValidator (allowIfSubTypeIsArray) 8.1 High -
pki-jackson-coreAlmaLinux jackson-core Has Potential for StackoverflowError if user parses an input file that contains very deeply nested data 8.7 High