Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Advisory: FasterXML jackson-dataformats-binary — GHSA-3v8f-v6vx-fmrm Clear all filters
TI-2026-48271 CVE-2026-68496 · GHSA-fvrx-r5jq-295q

Uncontrolled resource consumption in FasterXML jackson-dataformats-binary

Priority HIGH 72

The Smile parser in FasterXML jackson-dataformats-binary never invokes StreamReadConstraints.validateNameLength() when decoding JSON object property names, so the maxNameLength limit is not enforced for this format.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00561 Published 2026-10-01 No fix listed CWE-400
TI-2026-48270 CVE-2026-68495

Uncontrolled resource consumption in FasterXML jackson-dataformats-binary

Priority HIGH 72

The CBOR parser in FasterXML jackson-dataformats-binary never invokes StreamReadConstraints.validateNameLength() when decoding JSON object property names, so the maxNameLength limit is not enforced for this format.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00561 Published 2026-10-01 No fix listed CWE-400