https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 18 Oct 2026 18:54:22 +0000 https://vulnerability.circl.lu/vuln/fkie_cve-2026-95155 <p>FasterXML Jackson 1.x, confirmed in jackson-mapper-asl versions 1.8.3, 1.9.2, 1.9.11, 1.9.12, and 1.9.13, allows attackers to cause a denial of service by supplying deeply nested JSON input to an application that deserializes untrusted JSON using ObjectMapper.readValue.</p> <p>FasterXML Jackson 1.x, confirmed in jackson-mapper-asl versions 1.8.3, 1.9.2, 1.9.11, 1.9.12, and 1.9.13, allows attackers to cause a denial of service by supplying deeply nested JSON input to an application that deserializes untrusted JSON using ObjectMapper.readValue.</p> https://vulnerability.circl.lu/vuln/fkie_cve-2026-95155 https://vulnerability.circl.lu/vuln/ghsa-g67j-pphj-gj4x <p>FasterXML Jackson 1.x, confirmed in jackson-mapper-asl versions 1.8.3, 1.9.2, 1.9.11, 1.9.12, and 1.9.13, allows attackers to cause a denial of service by supplying deeply nested JSON input to an application that deserializes untrusted JSON using ObjectMapper.readValue.</p> <p>FasterXML Jackson 1.x, confirmed in jackson-mapper-asl versions 1.8.3, 1.9.2, 1.9.11, 1.9.12, and 1.9.13, allows attackers to cause a denial of service by supplying deeply nested JSON input to an application that deserializes untrusted JSON using ObjectMapper.readValue.</p> https://vulnerability.circl.lu/vuln/ghsa-g67j-pphj-gj4x https://vulnerability.circl.lu/vuln/ubuntu-cve-2026-95155 <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: libjackson-json-java, Ubuntu:16.04:LTS: libjackson-json-java, Ubuntu:18.04:LTS: libjackson-json-java, Ubuntu:20.04:LTS: libjackson-json-java, Ubuntu:22.04:LTS: libjackson-json-java, Ubuntu:24.04:LTS: libjackson-json-java, Ubuntu:26.10: libjackson-json-java, Ubuntu:26.04:LTS: libjackson-json-java</p> <p>FasterXML Jackson 1.x, confirmed in jackson-mapper-asl versions 1.8.3, 1.9.2, 1.9.11, 1.9.12, and 1.9.13, allows attackers to cause a denial of service by supplying deeply nested JSON input to an application that deserializes untrusted JSON using ObjectMapper.readValue.</p> <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: libjackson-json-java, Ubuntu:16.04:LTS: libjackson-json-java, Ubuntu:18.04:LTS: libjackson-json-java, Ubuntu:20.04:LTS: libjackson-json-java, Ubuntu:22.04:LTS: libjackson-json-java, Ubuntu:24.04:LTS: libjackson-json-java, Ubuntu:26.10: libjackson-json-java, Ubuntu:26.04:LTS: libjackson-json-java</p> <p>FasterXML Jackson 1.x, confirmed in jackson-mapper-asl versions 1.8.3, 1.9.2, 1.9.11, 1.9.12, and 1.9.13, allows attackers to cause a denial of service by supplying deeply nested JSON input to an application that deserializes untrusted JSON using ObjectMapper.readValue.</p> https://vulnerability.circl.lu/vuln/ubuntu-cve-2026-95155