Publish GHSA-2m67-wjpj-xhg9

advisory-database[bot] · advisory-database[bot] · commit 44f8ac1df8b9 · 2026-04-08T22:44:16.000Z
diff --git a/advisories/github-reviewed/2026/04/GHSA-2m67-wjpj-xhg9/GHSA-2m67-wjpj-xhg9.json b/advisories/github-reviewed/2026/04/GHSA-2m67-wjpj-xhg9/GHSA-2m67-wjpj-xhg9.json
@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-2m67-wjpj-xhg9",
-  "modified": "2026-04-04T04:17:07Z",
+  "modified": "2026-04-08T22:42:15Z",
   "published": "2026-04-04T04:17:07Z",
   "aliases": [],
   "summary": "Jackson Core: Document length constraint bypass in blocking, async, and DataInput parsers",
@@ -26,25 +26,34 @@
               "introduced": "3.0.0"
             },
             {
-              "last_affected": "3.1.0"
+              "fixed": "3.1.1"
             }
           ]
         }
-      ]
+      ],
+      "database_specific": {
+        "last_known_affected_version_range": "<= 3.1.0"
+      }
     }
   ],
   "references": [
     {
       "type": "WEB",
       "url": "https://github.com/FasterXML/jackson-core/security/advisories/GHSA-2m67-wjpj-xhg9"
     },
+    {
+      "type": "WEB",
+      "url": "https://github.com/FasterXML/jackson-core/commit/74c9ee255d1534c179bc7d3de48941bf39a9079c"
+    },
     {
       "type": "PACKAGE",
       "url": "https://github.com/FasterXML/jackson-core"
     }
   ],
   "database_specific": {
-    "cwe_ids": [],
+    "cwe_ids": [
+      "CWE-770"
+    ],
     "severity": "HIGH",
     "github_reviewed": true,
     "github_reviewed_at": "2026-04-04T04:17:07Z",

Original file line number	Diff line number	Diff line change
`@@ -1,7 +1,7 @@`
`1`	`1`	`{`
`2`	`2`	`"schema_version": "1.4.0",`
`3`	`3`	`"id": "GHSA-2m67-wjpj-xhg9",`
`4`		`- "modified": "2026-04-04T04:17:07Z",`
	`4`	`+ "modified": "2026-04-08T22:42:15Z",`
`5`	`5`	`"published": "2026-04-04T04:17:07Z",`
`6`	`6`	`"aliases": [],`
`7`	`7`	`"summary": "Jackson Core: Document length constraint bypass in blocking, async, and DataInput parsers",`
`@@ -26,25 +26,34 @@`
`26`	`26`	`"introduced": "3.0.0"`
`27`	`27`	`},`
`28`	`28`	`{`
`29`		`- "last_affected": "3.1.0"`
	`29`	`+ "fixed": "3.1.1"`
`30`	`30`	`}`
`31`	`31`	`]`
`32`	`32`	`}`
`33`		`- ]`
	`33`	`+ ],`
	`34`	`+ "database_specific": {`
	`35`	`+ "last_known_affected_version_range": "<= 3.1.0"`
	`36`	`+ }`
`34`	`37`	`}`
`35`	`38`	`],`
`36`	`39`	`"references": [`
`37`	`40`	`{`
`38`	`41`	`"type": "WEB",`
`39`	`42`	`"url": "https://github.com/FasterXML/jackson-core/security/advisories/GHSA-2m67-wjpj-xhg9"`
`40`	`43`	`},`
	`44`	`+ {`
	`45`	`+ "type": "WEB",`
	`46`	`+ "url": "https://github.com/FasterXML/jackson-core/commit/74c9ee255d1534c179bc7d3de48941bf39a9079c"`
	`47`	`+ },`
`41`	`48`	`{`
`42`	`49`	`"type": "PACKAGE",`
`43`	`50`	`"url": "https://github.com/FasterXML/jackson-core"`
`44`	`51`	`}`
`45`	`52`	`],`
`46`	`53`	`"database_specific": {`
`47`		`- "cwe_ids": [],`
	`54`	`+ "cwe_ids": [`
	`55`	`+ "CWE-770"`
	`56`	`+ ],`
`48`	`57`	`"severity": "HIGH",`
`49`	`58`	`"github_reviewed": true,`
`50`	`59`	`"github_reviewed_at": "2026-04-04T04:17:07Z",`