Known vulnerabilities in FasterXML jackson-dataformat-cbor
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2026-106554 | jackson-dataformat-cbor: quadratic-time TagList growth on unbounded stacked tags (CPU/GC DoS, PoC) | Not rated | Nov 4, 2026 |