THREATIST.IORead the docs Red Hat AMQ Broker 7.10.2 release and security update
Released 2022-12-07 · Red Hat rating Moderate · View on Red Hat →
Apache Commons Text performs variable interpolation, allowing properties to be dynamically evaluated and expanded.
In FasterXML jackson-databind before 2.13.4, resource exhaustion can occur because of a lack of a check in BeanDeserializer._deserializeFromArray to prevent use of deeply nested arrays.
In FasterXML jackson-databind before versions 2.13.4.1 and 2.12.17.1, resource exhaustion can occur because of a lack of a check in primitive value deserializers to avoid deep wrapper array nesting, when the UNWRAP_SINGL…
The package org.yaml:snakeyaml from 0 and before 1.31 are vulnerable to Denial of Service (DoS) due missing to nested depth limitation for collections.
Using snakeYAML to parse untrusted YAML files may be vulnerable to Denial of Service attacks (DOS).
Using snakeYAML to parse untrusted YAML files may be vulnerable to Denial of Service attacks (DOS).
Using snakeYAML to parse untrusted YAML files may be vulnerable to Denial of Service attacks (DOS).