发布于3月6日3月6日 Members Debian: CVE-2021-46877: jackson-databind -- security update Severity 8 CVSS (AV:N/AC:L/Au:N/C:N/I:N/A:C) Published 03/18/2023 Created 07/31/2024 Added 07/30/2024 Modified 01/28/2025 Description jackson-databind 2.10.x through 2.12.x before 2.12.6 and 2.13.x before 2.13.1 allows attackers to cause a denial of service (2 GB transient heap usage per read) in uncommon situations involving JsonNode JDK serialization. Solution(s) debian-upgrade-jackson-databind References https://attackerkb.com/topics/cve-2021-46877 CVE - 2021-46877
