ANSHUL SAINI created CASSANDRA-20848: ----------------------------------------
Summary: jackson-core vulnerability: CVE-2025-52999 Key: CASSANDRA-20848 URL: https://issues.apache.org/jira/browse/CASSANDRA-20848 Project: Apache Cassandra Issue Type: Bug Components: Dependencies Reporter: ANSHUL SAINI https://nvd.nist.gov/vuln/detail/CVE-2025-52999 jackson-core contains core low-level incremental ("streaming") parser and generator abstractions used by Jackson Data Processor. In versions prior to 2.15.0, if a user parses an input file and it has deeply nested data, Jackson could end up throwing a StackoverflowError if the depth is particularly large. -- This message was sent by Atlassian Jira (v8.20.10#820010) --------------------------------------------------------------------- To unsubscribe, e-mail: commits-unsubscr...@cassandra.apache.org For additional commands, e-mail: commits-h...@cassandra.apache.org