pki-jackson-databind vulnerabilities (TuxCare)
6 vulnerabilities.
pki-jackson-databindTuxCarejackson-databind: unbounded numeric parse in Duration and XMLGregorianCalendar deserialization allows CPU denial of service7.5 Highpki-jackson-databindTuxCarejackson-databind: PolymorphicTypeValidator bypass via generic type parameters allows arbitrary class instantiation8.1 Highpki-jackson-databindTuxCarejackson-databind: Array subtype allowlist bypass in BasicPolymorphicTypeValidator (allowIfSubTypeIsArray)8.1 Highpki-jackson-databindTuxCarejackson-databind: InetSocketAddress deserialization triggers eager DNS resolution (SSRF)5.3 Mediumpki-jackson-databindTuxCarejackson-core Has Potential for StackoverflowError if user parses an input file that contains very deeply nested data8.7 Highpki-jackson-databindTuxCareDeeply nested json in jackson-databind7.5 High