| Package | Affected versions | Patched versions |
|---|---|---|
| com.fasterxml.jackson.dataformat:jackson-dataformat-cbor | ≥ 2.12.0rc1, < 2.12.1≥ 2.8.0rc1, < 2.11.4 | 2.12.12.11.4 |
| jackson-dataformats-binary | = 2.12.0> 2.12.0, < 2.12.1< 2.11.4 | 2.12.12.11.4 |
| weblogic server | = 12.2.1.3.0= 12.2.1.4.0= 14.1.1.0.0 | |
| quarkus | < 2.0.2 | 2.0.2 |
This affects the package com.fasterxml.jackson.dataformat:jackson-dataformat-cbor from 2.8.0-rc1 and before 2.11.4, from 2.12.0-rc1 and before 2.12.1. Unchecked allocation of byte buffer can cause a java.lang.OutOfMemoryError exception.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free