eclipse-ee4j / eclipse-ee4j/jersey
jackson-core < 2.8.6 writes untrimmed parsing errors to disk
Open
- Dominant language
- Java
- Stars
- 730
- Forks
- 382
- PR merge metrics
- No merged PRs in 30d
Description
jackson-core >= 2.8.6 fixes a problem with the JSON parsing where an attacker can fill up the logfile with (long) invalid JSON-Tokens and can potentially cause a DoS.
See https://github.com/FasterXML/jackson-core/pull/322 for more information.
Contributor guide
Assessment
This issue has not been assessed yet.