https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 09:55:27 +0000 https://cve.radiocsirt.org/vuln/bdu:2023-05617 bdu:2023-05617 https://cve.radiocsirt.org/vuln/bdu:2023-05617 https://cve.radiocsirt.org/vuln/certfr-2023-avi-0008 certfr-2023-avi-0008 https://cve.radiocsirt.org/vuln/certfr-2023-avi-0008 https://cve.radiocsirt.org/vuln/euvd-2026-19559 EUVD-2026-19559 https://cve.radiocsirt.org/vuln/euvd-2026-19559 https://cve.radiocsirt.org/vuln/fkie_cve-2022-42004 <p>In FasterXML jackson-databind before 2.13.4, resource exhaustion can occur because of a lack of a check in BeanDeserializer._deserializeFromArray to prevent use of deeply nested arrays. An application is vulnerable only with certain customized choices for deserialization.</p> <p>In FasterXML jackson-databind before 2.13.4, resource exhaustion can occur because of a lack of a check in BeanDeserializer._deserializeFromArray to prevent use of deeply nested arrays. An application is vulnerable only with certain customized choices for deserialization.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2022-42004 https://cve.radiocsirt.org/vuln/ghsa-rgv9-q543-rqg4 <p><strong>Affected:</strong> Maven: com.fasterxml.jackson.core:jackson-databind</p> <p>In FasterXML jackson-databind before 2.12.7.1 and in 2.13.x before 2.13.4, resource exhaustion can occur because of a lack of a check in BeanDeserializer._deserializeFromArray to prevent use of deeply nested arrays. This issue can only happen when the `UNWRAP_SINGLE_VALUE_ARRAYS` feature is explicitly enabled.</p> <p><strong>Affected:</strong> Maven: com.fasterxml.jackson.core:jackson-databind</p> <p>In FasterXML jackson-databind before 2.12.7.1 and in 2.13.x before 2.13.4, resource exhaustion can occur because of a lack of a check in BeanDeserializer._deserializeFromArray to prevent use of deeply nested arrays. This issue can only happen when the `UNWRAP_SINGLE_VALUE_ARRAYS` feature is explicitly enabled.</p> https://cve.radiocsirt.org/vuln/ghsa-rgv9-q543-rqg4 https://cve.radiocsirt.org/vuln/gsd-2022-42004 gsd-2022-42004 https://cve.radiocsirt.org/vuln/gsd-2022-42004 https://cve.radiocsirt.org/vuln/oesa-2023-1921 <p><strong>Affected:</strong> openEuler:20.03-LTS-SP1: jackson-databind, openEuler:20.03-LTS-SP3: jackson-databind, openEuler:22.03-LTS: jackson-databind, openEuler:22.03-LTS-SP1: jackson-databind, openEuler:22.03-LTS-SP2: jackson-databind</p> <p>The general-purpose data-binding functionality and tree-model for Jackson Data Processor. It builds on core streaming parser/generator package, and uses Jackson Annotations for configuration. Security Fix(es): jackson-databind before 2.13.0 allows a Java StackOverflow exception and denial of service via a large depth of nested objects.(CVE-2020-36518) In FasterXML jackson-databind before 2.14.0-rc1, resource exhaustion can occur because of a lack of a check in primitive value deserializers to avoid deep wrapper array nesting, when the UNWRAP_SINGLE_VALUE_ARRAYS feature is enabled. Additional fix version in 2.13.4.1 and 2.12.17.1(CVE-2022-42003) In FasterXML jackson-databind before 2.13.4, resource exhaustion can occur because of a lack of a check in BeanDeserializer._deserializeFromArray to prevent use of deeply nested arrays. An application is vulnerable only with certain customized choices for deserialization.(CVE-2022-42004)</p> <p><strong>Affected:</strong> openEuler:20.03-LTS-SP1: jackson-databind, openEuler:20.03-LTS-SP3: jackson-databind, openEuler:22.03-LTS: jackson-databind, openEuler:22.03-LTS-SP1: jackson-databind, openEuler:22.03-LTS-SP2: jackson-databind</p> <p>The general-purpose data-binding functionality and tree-model for Jackson Data Processor. It builds on core streaming parser/generator package, and uses Jackson Annotations for configuration. Security Fix(es): jackson-databind before 2.13.0 allows a Java StackOverflow exception and denial of service via a large depth of nested objects.(CVE-2020-36518) In FasterXML jackson-databind before 2.14.0-rc1, resource exhaustion can occur because of a lack of a check in primitive value deserializers to avoid deep wrapper array nesting, when the UNWRAP_SINGLE_VALUE_ARRAYS feature is enabled. Additional fix version in 2.13.4.1 and 2.12.17.1(CVE-2022-42003) In FasterXML jackson-databind before 2.13.4, resource exhaustion can occur because of a lack of a check in BeanDeserializer._deserializeFromArray to prevent use of deeply nested arrays. An application is vulnerable only with certain customized choices for deserialization.(CVE-2022-42004)</p> https://cve.radiocsirt.org/vuln/oesa-2023-1921 https://cve.radiocsirt.org/vuln/opensuse-su-2024:12412-1 <p>jackson-databind-2.13.4.2-1.1 on GA media</p> <p>jackson-databind-2.13.4.2-1.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2024:12412-1 https://cve.radiocsirt.org/vuln/rhsa-2022:7435 <p>jackson-databind: denial of service via a large depth of nested objects golang: golang.org/x/text/language: ParseAcceptLanguage takes a long time to parse complex tags jackson-databind: deep wrapper array nesting wrt UNWRAP_SINGLE_VALUE_ARRAYS jackson-databind: use of deeply nested arrays</p> <p>jackson-databind: denial of service via a large depth of nested objects golang: golang.org/x/text/language: ParseAcceptLanguage takes a long time to parse complex tags jackson-databind: deep wrapper array nesting wrt UNWRAP_SINGLE_VALUE_ARRAYS jackson-databind: use of deeply nested arrays</p> https://cve.radiocsirt.org/vuln/rhsa-2022:7435 https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-42004 <p><strong>Affected:</strong> Ubuntu:22.04:LTS: jackson-databind, Ubuntu:24.04:LTS: jackson-databind, Ubuntu:25.10: jackson-databind, Ubuntu:26.04:LTS: jackson-databind</p> <p>In FasterXML jackson-databind before 2.13.4, resource exhaustion can occur because of a lack of a check in BeanDeserializer._deserializeFromArray to prevent use of deeply nested arrays. An application is vulnerable only with certain customized choices for deserialization.</p> <p><strong>Affected:</strong> Ubuntu:22.04:LTS: jackson-databind, Ubuntu:24.04:LTS: jackson-databind, Ubuntu:25.10: jackson-databind, Ubuntu:26.04:LTS: jackson-databind</p> <p>In FasterXML jackson-databind before 2.13.4, resource exhaustion can occur because of a lack of a check in BeanDeserializer._deserializeFromArray to prevent use of deeply nested arrays. An application is vulnerable only with certain customized choices for deserialization.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-42004 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-1608 <p>Ein Angreifer kann mehrere Schwachstellen in FasterXML Jackson ausnutzen, um einen Denial of Service Angriff durchzuführen.</p> <p>Ein Angreifer kann mehrere Schwachstellen in FasterXML Jackson ausnutzen, um einen Denial of Service Angriff durchzuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2022-1608