Vendor
FasterXML Jackson Denial of Service Vulnerability
1 TTPA vulnerability in FasterXML Jackson allows a remote, unauthenticated attacker to trigger a denial of service (DoS) condition in applications using the library for data processing.
Unbounded StringBuilder Growth in jackson-core via DataInput
1 TTP 1 CVEThe jackson-core library suffers from a denial-of-service vulnerability (CVE-2026-89425) where malformed tokens in DataInput-backed parsers cause unbounded memory consumption, leading to potential JVM process crashes.
Denial of Service via Unbounded Numeric Deserialization in Jackson Databind
1 TTP 1 CVEA vulnerability in jackson-databind allows unauthenticated attackers to cause CPU exhaustion and denial of service by supplying specially crafted strings that bypass length constraints during XML datatype deserialization.
FasterXML Jackson-databind Information Disclosure Vulnerability
1 CVEA vulnerability in FasterXML Jackson-databind identified as CVE-2024-42572 allows a remote unauthenticated attacker to exploit polymorphic type handling for information disclosure.
FasterXML Jackson Denial of Service Vulnerability
1 TTPA vulnerability in the FasterXML Jackson library allows remote, anonymous attackers to trigger a Denial of Service (DoS) condition by manipulating data processed by the library.
Jackson-core Async Parser Max Number Length Bypass via Chunked Digit Accumulation
1 TTPAn incomplete fix for GHSA-72hv-8253-57qq in `jackson-core` versions 2.18.6, 2.21.1, and potentially 3.0.x/3.1.x, allows attackers to bypass `maxNumberLength` constraints in the non-blocking JSON parser by streaming JSON numbers in small chunks, leading to unbounded memory accumulation and denial of service in reactive applications.