2022-03-11 00:00:00
mitre
PUBLISHED
jackson-databind before 2.13.0 allows a Java StackOverflow exception and denial of service via a large depth of nested objects.