Security
فارسی
All products

Red Hat build of Apache Camel - HawtIO 4/jackson-core

Red Hat · Package
5 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
jackson-core: Async parser maxNumberLength bypass via chunked digit accumulation (incomplete fix for GHSA-72hv-8253-57qq)CVE-2026-68494 · GHSA-R7WM-3CXJ-WFF9 com.fasterxml.jackson.core:jackson-coretools.jackson.core:jackson-core MavenRed Hat High Fix reported
jackson-core: ReDoS: quadratic backtracking in NumberInput.PATTERN_FLOAT via looksLikeValidNumber()CVE-2026-89407 · GHSA-P6PP-M3F8-5C89 com.fasterxml.jackson.core:jackson-coretools.jackson.core:jackson-core MavenRed Hat High Fix reported
jackson-core: UTF8DataInputJsonParser._reportInvalidToken() missing maxErrorTokenLength limit -> unbounded StringBuilder growth (DoS)CVE-2026-89425 · GHSA-7HHH-6RMP-J9QF com.fasterxml.jackson.core:jackson-coretools.jackson.core:jackson-core MavenRed Hat High Fix reported
Jackson-core Vulnerable to Memory Disclosure via Source Snippet in JsonLocationCVE-2025-49128 · GHSA-WF8F-6423-GFXG com.fasterxml.jackson.core:jackson-coreCryostat 4/jackson-core MavenRed Hat Medium Fix reported
com.fasterxml.jackson.core/jackson-core: tools.jackson.core/jackson-core: jackson-core: Denial of Service via excessively long JSON property namesCVE-2026-68498 Exploit Intelligence/exploit-intelligence/agent-client-rhel9OpenShift Serverless/openshift-serverless-1/kn-eventing-integrations-aws-ddb-streams-source-rhel9 Red Hat High No fix reported