jackson-bom vulnerabilities (Red Hat)
6 vulnerabilities.
-
jackson-bomRed Hat jackson-databind: PolymorphicTypeValidator bypass via generic type parameters allows arbitrary class instantiation 8.1 High -
jackson-bomRed Hat jackson-databind: Array subtype allowlist bypass in BasicPolymorphicTypeValidator (allowIfSubTypeIsArray) 8.1 High -
jackson-bomRed Hat Apache Tomcat: Directory traversal via rewrite with possible RCE if PUT is enabled 7.5 High -
jackson-bomRed Hat jackson-core Has Potential for StackoverflowError if user parses an input file that contains very deeply nested data 8.7 High -
jackson-bomRed Hat Apache Tomcat: Bypass of rules in Rewrite Valve 9.8 Critical -
jackson-bomRed Hat Deeply nested json in jackson-databind 7.5 High