TI-2022-01345 CVE-2022-1471 · GHSA-mjmj-j48q-9wg2
Remote Code execution in SnakeYAML
Priority CRITICAL 88
SnakeYaml's Constructor() class does not restrict types which can be instantiated during deserialization.
RHSA-2022:9032
Red Hat build of Eclipse Vert.x 4.3.4 security update
Released 2022-12-15 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat build of Eclipse Vert.x 4.3.4
Fixes 3 records
TI-2022-20343 CVE-2022-42004 · GHSA-rgv9-q543-rqg4
In FasterXML jackson-databind before 2.13.4, resource exhaustion can occur because of a…
Priority MEDIUM 45
In FasterXML jackson-databind before 2.13.4, resource exhaustion can occur because of a lack of a check in BeanDeserializer._deserializeFromArray to prevent use of deeply nested arrays.
TI-2022-20342 CVE-2022-42003 · GHSA-jjjh-jjxp-wpff
In FasterXML jackson-databind before versions 2.13.4.1 and 2.12.17.1, resource exhaustion…
Priority LOW 39
In FasterXML jackson-databind before versions 2.13.4.1 and 2.12.17.1, resource exhaustion can occur because of a lack of a check in primitive value deserializers to avoid deep wrapper array nesting, when the UNWRAP_SINGL…