Red Hat Security Advisory

RHSA-2022:5596

Red Hat build of Quarkus 2.7.6 release and security update

Released 2022-07-19 · Red Hat rating Moderate · View on Red Hat →

Fixed in

TI-2020-18753 CVE-2020-36518 · GHSA-57j2-w4cx-62h2

MEDIUM 47

jackson-databind before 2.13.0 allows a Java StackOverflow exception and denial of service via a large depth of nested objects.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0486 Published 2022-03-11 Partial fix · 2.13.2.1, 2.12.6.1 CWE-787