Known vulnerabilities in FasterXML jackson-dataformat-protobuf
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2026-110747 | ProtobufParser._readStringKey() reads the length prefix of a protobuf map entry's string key into an attacker-controlled… | 7.5 High | Oct 28, 2026 |
| CVE-2026-104016 | jackson-dataformat-protobuf: signed integer overflow in string-length paths allows unbounded array allocation and OutOfMemoryError | 7.5 High | Oct 27, 2026 |