Skip to content

Commit 51cac74

Browse files
committed
1 parent 189c2cd commit 51cac74

1 file changed

Lines changed: 2 additions & 6 deletions

File tree

advisories/github-reviewed/2022/10/GHSA-rgv9-q543-rqg4/GHSA-rgv9-q543-rqg4.json

Lines changed: 2 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -1,18 +1,14 @@
11
{
22
"schema_version": "1.4.0",
33
"id": "GHSA-rgv9-q543-rqg4",
4-
"modified": "2024-12-02T16:17:21Z",
4+
"modified": "2024-12-02T16:17:22Z",
55
"published": "2022-10-03T00:00:31Z",
66
"aliases": [
77
"CVE-2022-42004"
88
],
99
"summary": "Uncontrolled Resource Consumption in FasterXML jackson-databind",
1010
"details": "In FasterXML jackson-databind before 2.12.7.1 and in 2.13.x before 2.13.4, resource exhaustion can occur because of a lack of a check in BeanDeserializer._deserializeFromArray to prevent use of deeply nested arrays. This issue can only happen when the `UNWRAP_SINGLE_VALUE_ARRAYS` feature is explicitly enabled.",
1111
"severity": [
12-
{
13-
"type": "CVSS_V3",
14-
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
15-
},
1612
{
1713
"type": "CVSS_V4",
1814
"score": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N"
@@ -29,7 +25,7 @@
2925
"type": "ECOSYSTEM",
3026
"events": [
3127
{
32-
"introduced": "0"
28+
"introduced": "2.4.0"
3329
},
3430
{
3531
"fixed": "2.12.7.1"

0 commit comments

Comments
 (0)