ALSA-2026:85231
See a problem?- Import Source
- https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2026:85231.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/ALSA-2026:85231
- Related
- Published
- 2026-10-19T00:00:00Z
- Modified
- 2026-10-20T14:45:02Z
- Summary
- Important: jackson-databind security update
- Details
-
The general-purpose data-binding functionality and tree-model for Jackson Data Processor. It builds on core streaming parser/generator package, and uses Jackson Annotations for configuration.
Security Fix(es):
- com.fasterxml.jackson.core/jackson-databind: tools.jackson.core:jackson-databind: Jackson-databind: Denial of Service via quadratic forward-reference completion (CVE-2026-91777)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
- References