jackson-databind: quadratic forward-reference completion in Collection and Map deserializers
CVE-2026-91777
Forward-reference completion for @JsonIdentityInfo object IDs in FasterXML jackson-databind performs a linear scan of th
#advisory
共收录 23334 条相关情报。
← 返回所有主题jackson-databind: unbounded growth of the type id cache in TypeDeserializerBase retains every unknown raw type ID
CVE-2026-91776
TypeDeserializerBase._findDeserializer() in FasterXML jackson-databind caches the resolved deserializer under the raw, a
iFlytek astron-agent debugToolV2 API endpoint UrlCheckTool.checkUrl server-side request forgery
CVE-2026-95930
A security vulnerability has been detected in iFlytek astron-agent up to 1.0.6. Affected by this vulnerability is the fu
jackson-core: UTF8DataInputJsonParser._reportInvalidToken() does not honor maxErrorTokenLength, allowing unbounded StringBuilder growth
CVE-2026-89425
UTF8DataInputJsonParser._reportInvalidToken() in FasterXML jackson-core builds the offending-token text for its error me
iFlytek astron-agent getBotList API endpoint ChatBotMarketMapper.xml sql injection
CVE-2026-95929
A weakness has been identified in iFlytek astron-agent up to 1.0.7. Affected is an unknown function of the file console/
recommenders-team recommenders Dict Loading mind_iterator.py pickle.load deserialization
CVE-2026-95928
A security flaw has been discovered in recommenders-team recommenders up to 1.2.1. This impacts the function pickle.load
A vulnerability was identified in TDuckCloud tduck-platform up to 5.3. This vulnerability affects...
CVE-2026-95829
A vulnerability was identified in TDuckCloud tduck-platform up to 5.3. This vulnerability affects the function Paginatio
OpenEye Apex Network Video Recorder (NVR) firmware 3.2.9.376 contains an OS command injection...
CVE-2026-94367
OpenEye Apex Network Video Recorder (NVR) firmware 3.2.9.376 contains an OS command injection vulnerability in recbackup
A security flaw has been discovered in theRealSain Pixtream up to...
CVE-2026-95830
A security flaw has been discovered in theRealSain Pixtream up to 866afd4f0cea812b918780fb74b67dccf8c4d6a0. This issue a
A weakness has been identified in itsourcecode Leave Management System 1.0. Impacted is an...
CVE-2026-95833
A weakness has been identified in itsourcecode Leave Management System 1.0. Impacted is an unknown function of the file
OpenEye Apex Network Video Recorder (NVR) firmware 3.2.9.376 uses an administrator password-reset...
CVE-2026-92930
OpenEye Apex Network Video Recorder (NVR) firmware 3.2.9.376 uses an administrator password-reset unlock-code design tha
A weakness has been identified in AdithyaYelloju Restaurant-Management-System up to...
CVE-2026-95868
A weakness has been identified in AdithyaYelloju Restaurant-Management-System up to 7f0e7e84255e8fcfd488e83f8f91451bbbff
IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to...
CVE-2026-18162
IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to execute arbitrary code due
IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote authenticated...
CVE-2026-18169
IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote authenticated attacker to obtain sensi
IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to...
CVE-2026-18163
IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to execute arbitrary code due
IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to...
CVE-2026-18131
IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to execute arbitrary JavaScri
IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to...
CVE-2026-18123
IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to cause a denial of service
IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to...
CVE-2026-18152
IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to forge validly-signed messa
IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote authenticated...
CVE-2026-18156
IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote authenticated attacker to bypass secur
IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote authenticated...
CVE-2026-18132
IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote authenticated attacker to perform unau