Maven Com.fasterxml.jackson.dataformat:jackson-dataformat-cbor vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Maven Com.fasterxml.jackson.dataformat:jackson-dataformat-cbor: 1 record(s), with affected versions and fixes.
CVE-2020-28491
High · 7.5
CWE-770 Feb 18, 2021
Denial of Service (DoS)
This affects the package com.fasterxml.jackson.dataformat:jackson-dataformat-cbor from 0 and before 2.11.4, from 2.12.0-rc1 and before 2.12.1. Unchecked allocation of byte buffer can cause a java.lang.OutOfMemoryError exception.