Security
English
همهٔ محصولات

Red Hat JBoss Web Server 7/jboss-webserver-7/jws70-openjdk21-openshift-rhel9

Red Hat · بسته
9 گزارش
اطلاع‌رسانی آسیب‌پذیری
دنبال‌کردن
گزارشمحصولاکوسیستمشدتوضعیت اصلاحآخرین تغییر
jackson-databind: @JsonView bypassed for @JsonUnwrapped container properties on deserializationCVE-2026-59889 · GHSA-5GVW-P9QM-JGWH com.fasterxml.jackson.core:jackson-databindtools.jackson.core:jackson-databind MavenRed Hat متوسط اصلاح گزارش شده
jackson-core: Async parser maxNumberLength bypass via chunked digit accumulation (incomplete fix for GHSA-72hv-8253-57qq)CVE-2026-68494 · GHSA-R7WM-3CXJ-WFF9 com.fasterxml.jackson.core:jackson-coretools.jackson.core:jackson-core MavenRed Hat زیاد اصلاح گزارش شده
jackson-core: ReDoS: quadratic backtracking in NumberInput.PATTERN_FLOAT via looksLikeValidNumber()CVE-2026-89407 · GHSA-P6PP-M3F8-5C89 com.fasterxml.jackson.core:jackson-coretools.jackson.core:jackson-core MavenRed Hat زیاد اصلاح گزارش شده
jackson-core: UTF8DataInputJsonParser._reportInvalidToken() missing maxErrorTokenLength limit -> unbounded StringBuilder growth (DoS)CVE-2026-89425 · GHSA-7HHH-6RMP-J9QF com.fasterxml.jackson.core:jackson-coretools.jackson.core:jackson-core MavenRed Hat زیاد اصلاح گزارش شده
jackson-databind: Comparable missing from DefaultBaseTypeLimitingValidator's unsafe base types (incomplete PolymorphicTypeValidator denylist)CVE-2026-83557 · GHSA-GX83-3VF8-GH7J com.fasterxml.jackson.core:jackson-databindtools.jackson.core:jackson-databind MavenRed Hat متوسط اصلاح گزارش شده
jackson-databind: Duration XMLGregorianCalendar Unbounded Number Parse DoSCVE-2026-68497 · GHSA-Q4XH-88C3-WMH7 com.fasterxml.jackson.core:jackson-databindtools.jackson.core:jackson-databind MavenRed Hat زیاد اصلاح گزارش شده
jackson-databind: Path Deserialization Missing Scheme Allowlist for FileSystemProvider ResolutionCVE-2026-19032 · GHSA-WJGM-6HV5-3CVF com.fasterxml.jackson.core:jackson-databindtools.jackson.core:jackson-databind MavenRed Hat متوسط اصلاح گزارش شده
jackson-databind: Incomplete fix for CVE-2026-54514: eager DNS resolution (SSRF) still present in InetAddress deserializationCVE-2026-77310 · GHSA-VVGP-RFG2-7RR6 com.fasterxml.jackson.core:jackson-databindtools.jackson.core:jackson-databind MavenRed Hat متوسط اصلاح گزارش شده
com.fasterxml.jackson.core/jackson-core: tools.jackson.core/jackson-core: jackson-core: Denial of Service via excessively long JSON property namesCVE-2026-68498 Exploit Intelligence/exploit-intelligence/agent-client-rhel9OpenShift Serverless/openshift-serverless-1/kn-eventing-integrations-aws-ddb-streams-source-rhel9 Red Hat زیاد اصلاح اعلام نشده