pki-jackson-jaxrs-providers vulnerabilities (AlmaLinux)
4 vulnerabilities.
pki-jackson-jaxrs-providersAlmaLinuxjackson-databind: unbounded numeric parse in Duration and XMLGregorianCalendar deserialization allows CPU denial of service7.5 Highpki-jackson-jaxrs-providersAlmaLinuxjackson-databind: PolymorphicTypeValidator bypass via generic type parameters allows arbitrary class instantiation8.1 Highpki-jackson-jaxrs-providersAlmaLinuxjackson-databind: Array subtype allowlist bypass in BasicPolymorphicTypeValidator (allowIfSubTypeIsArray)8.1 Highpki-jackson-jaxrs-providersAlmaLinuxjackson-core Has Potential for StackoverflowError if user parses an input file that contains very deeply nested data8.7 High