Vulnerabilities (CVE)

Filtered by vendor Fasterxml Subscribe
Filtered by product Jackson-dataformats-binary
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2020-28491 3 Fasterxml, Oracle, Quarkus 3 Jackson-dataformats-binary, Weblogic Server, Quarkus 2022-12-06 5.0 MEDIUM 7.5 HIGH
This affects the package com.fasterxml.jackson.dataformat:jackson-dataformat-cbor from 0 and before 2.11.4, from 2.12.0-rc1 and before 2.12.1. Unchecked allocation of byte buffer can cause a java.lang.OutOfMemoryError exception.