A vulnerability in jackson-databind allows unauthenticated attackers to cause CPU exhaustion and denial of service by supplying specially crafted strings that bypass length constraints during XML datatype deserialization.
jackson-databind +14
denial-of-service
vulnerability
deserialization
library-vulnerability
java
json
cve-2026-91777
memory-exhaustion
+1
1t
1c
updated