[ https://issues.apache.org/jira/browse/CASSANDRA-20848?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Brandon Williams updated CASSANDRA-20848: ----------------------------------------- Status: Ready to Commit (was: Review In Progress) > jackson-core vulnerability: CVE-2025-52999 > ------------------------------------------ > > Key: CASSANDRA-20848 > URL: https://issues.apache.org/jira/browse/CASSANDRA-20848 > Project: Apache Cassandra > Issue Type: Bug > Components: Dependencies > Reporter: ANSHUL SAINI > Assignee: Stefan Miklosovic > Priority: Normal > Fix For: 4.0.x, 4.1.x, 5.0.x, 5.x > > Time Spent: 40m > Remaining Estimate: 0h > > https://nvd.nist.gov/vuln/detail/CVE-2025-52999 > jackson-core contains core low-level incremental ("streaming") parser and > generator abstractions used by Jackson Data Processor. In versions prior to > 2.15.0, if a user parses an input file and it has deeply nested data, Jackson > could end up throwing a StackoverflowError if the depth is particularly large. -- This message was sent by Atlassian Jira (v8.20.10#820010) --------------------------------------------------------------------- To unsubscribe, e-mail: commits-unsubscr...@cassandra.apache.org For additional commands, e-mail: commits-h...@cassandra.apache.org