jackson-core vulnerabilities (Debian)
5 vulnerabilities.
-
jackson-coreDebian jackson-core: Delayed maxNameLength enforcement for char-backed input (ReaderBasedJsonParser) allows memory-exhaustion denial of service 7.5 High -
jackson-coreDebian jackson-core: UTF8DataInputJsonParser._reportInvalidToken() does not honor maxErrorTokenLength, allowing unbounded StringBuilder growth 7.5 High -
jackson-coreDebian jackson-core: quadratic backtracking in NumberInput.PATTERN_FLOAT via looksLikeValidNumber() enables ReDoS 7.5 High -
jackson-coreDebian jackson-core Has Potential for StackoverflowError if user parses an input file that contains very deeply nested data 8.7 High -
jackson-coreDebian Jackson-core Vulnerable to Memory Disclosure via Source Snippet in JsonLocation 4.0 Medium