Red Hat build of Apache Camel 4 for Quarkus 3/jackson-core
Red Hat · Package
Vulnerability alerts
Follow| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|---|---|---|---|---|
| jackson-core: Async parser maxNumberLength bypass via chunked digit accumulation (incomplete fix for GHSA-72hv-8253-57qq) | com.fasterxml.jackson.core:jackson-coretools.jackson.core:jackson-core | MavenRed Hat | High | Fix reported | |
| jackson-core: ReDoS: quadratic backtracking in NumberInput.PATTERN_FLOAT via looksLikeValidNumber() | com.fasterxml.jackson.core:jackson-coretools.jackson.core:jackson-core | MavenRed Hat | High | Fix reported | |
| jackson-core: UTF8DataInputJsonParser._reportInvalidToken() missing maxErrorTokenLength limit -> unbounded StringBuilder growth (DoS) | com.fasterxml.jackson.core:jackson-coretools.jackson.core:jackson-core | MavenRed Hat | High | Fix reported |