GCVE Workshop - 22 September 2026 (14:00-18:00), Luxembourg Before The Vulnopticon Conference - Registration
← All credits

cowtowncoder (Tatu Saloranta)

2 vulnerability records and advisories credit this contributor.

CVE-2026-68494
jackson-core: Async parser maxNumberLength bypass via chunked digit accumulation (incomplete fix for CVE-2026-18401 / GHSA-72hv-8253-57qq)
CVE-2026-18401
jackson-core: Number length constraint bypass in non-blocking (async) JSON parser leads to potential denial of service