Skip to content
OpenAdvisories

Package · Wolfi

cass-config-builder

5 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.9
    CVE-2026-18401

    jackson-core: Number length constraint bypass in non-blocking (async) JSON parser leads to potential denial of service

    The non-blocking (asynchronous) JSON parser in jackson-core does not enforce the maxNumberLength constraint defined in StreamReadConstraints (default: 1000 characters). An attacker able to submit JSON to an application that uses the async parser API can suppl…

    FasterXML jackson-core druid thingsboard-tb-node Ubuntu Wolfi Maven