​
DirectorySecurity Advisories
Sign In
Security Advisories

CGA-449j-52qq-cgj7

Published

Last updated

https://images.chainguard.dev/security/CGA-449j-52qq-cgj7
Package

management-api-for-apache-cassandra-5.0

Latest Update
Fixed
Fixed Version

0.1.89-r0

Aliases
  • CVE-2020-36518
  • GHSA-57j2-w4cx-62h2

Severity

7.5

High

CVSS V3

Summary

Deeply nested json in jackson-databind

Description

jackson-databind is a data-binding package for the Jackson Data Processor. jackson-databind allows a Java stack overflow exception and denial of service via a large depth of nested objects.

References

Updates


Safe Source for Open Sourceâ„¢
Media KitContact Us
© 2024 Chainguard. All Rights Reserved.
Private PolicyTerms of Use

Product

Chainguard Images