ANSHUL SAINI created CASSANDRA-20848:
----------------------------------------

             Summary: jackson-core vulnerability: CVE-2025-52999
                 Key: CASSANDRA-20848
                 URL: https://issues.apache.org/jira/browse/CASSANDRA-20848
             Project: Apache Cassandra
          Issue Type: Bug
          Components: Dependencies
            Reporter: ANSHUL SAINI


https://nvd.nist.gov/vuln/detail/CVE-2025-52999

jackson-core contains core low-level incremental ("streaming") parser and 
generator abstractions used by Jackson Data Processor. In versions prior to 
2.15.0, if a user parses an input file and it has deeply nested data, Jackson 
could end up throwing a StackoverflowError if the depth is particularly large.



--
This message was sent by Atlassian Jira
(v8.20.10#820010)

---------------------------------------------------------------------
To unsubscribe, e-mail: commits-unsubscr...@cassandra.apache.org
For additional commands, e-mail: commits-h...@cassandra.apache.org

Reply via email to