Fasterxml Jackson-dataformat-cbor vulnerabilities

• fasterxml jackson-dataformat-cbor jackson-dataformat-cbor: quadratic-time TagList growth on unbounded stacked tags (CPU/GC DoS, PoC) CVE-2026-106554 No scoreNovember 4, 2026