Security
فارسی
All products

tools.jackson.core:jackson-core

Maven · Package
6 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
jackson-core: Async parser maxNumberLength bypass via chunked digit accumulation (incomplete fix for GHSA-72hv-8253-57qq)CVE-2026-68494 · GHSA-R7WM-3CXJ-WFF9 com.fasterxml.jackson.core:jackson-coretools.jackson.core:jackson-core MavenRed Hat High Fix reported
jackson-core: ReDoS: quadratic backtracking in NumberInput.PATTERN_FLOAT via looksLikeValidNumber()CVE-2026-89407 · GHSA-P6PP-M3F8-5C89 com.fasterxml.jackson.core:jackson-coretools.jackson.core:jackson-core MavenRed Hat High Fix reported
jackson-core: UTF8DataInputJsonParser._reportInvalidToken() missing maxErrorTokenLength limit -> unbounded StringBuilder growth (DoS)CVE-2026-89425 · GHSA-7HHH-6RMP-J9QF com.fasterxml.jackson.core:jackson-coretools.jackson.core:jackson-core MavenRed Hat High Fix reported
Jackson Core: Document length constraint bypass in blocking, async, and DataInput parsersGHSA-2M67-WJPJ-XHG9 tools.jackson.core:jackson-core Maven High Fix reported
jackson-core has Nesting Depth Constraint Bypass in `UTF8DataInputJsonParser` potentially allowing Resource ExhaustionCVE-2026-29062 · GHSA-6V53-7C9G-W56R tools.jackson.core:jackson-core Maven High Fix reported
jackson-core: Number Length Constraint Bypass in Async Parser Leads to Potential DoS ConditionCVE-2026-18401 · GHSA-72HV-8253-57QQ com.fasterxml.jackson.core:jackson-coretools.jackson.core:jackson-core MavenRed Hat Medium Fix reported