Staging Environment: Content and features may be unstable or change without notice.

Advisory Weakness Curation

CVE-2020-36518

Progress 0 / 0

Advisory Summaries

github_osv/GHSA-57j2-w4cx-62h2

Deeply nested json in jackson-databind jackson-databind is a data-binding package for the Jackson Data Processor. jackson-databind allows a Java stack overflow exception and denial of service via a large depth of nested objects.

gitlab/maven/com.fasterxml.jackson.core/jackson-databind/CVE-2020-36518

Uncontrolled Resource Consumption jackson-databind before 2.13.0 allows a Java StackOverflow exception and denial of service via a large depth of nested objects.