CVE-2023-3894
1 advisory.
Maven/com.fasterxml.jackson.dataformat:jackson-dataformat-toml CVE-2023-3894: high 8.6
Denial of service in jackson-dataformat-toml
Action: Upgrade com.fasterxml.jackson.dataformat:jackson-dataformat-toml to 2.15.0 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.15.0 | - |
Fixed versions
| 2.15.0 |
Sources
- osv: GHSA-rg2c-cfxv-qp6f
- https://nvd.nist.gov/vuln/detail/CVE-2023-3894
- https://github.com/FasterXML/jackson-dataformats-text/pull/398
- https://github.com/FasterXML/jackson-dataformats-text/commit/5dd5f740aedcf37adad7ffece460e75e54abb0ed
- https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50083
- https://github.com/FasterXML/jackson-dataformats-text
- https://github.com/FasterXML/jackson-dataformats-text/blob/2.16/release-notes/VERSION-2.x
CVE-2023-3894 · published · modified · JSON