Fasterxml Jackson-Dataformat-Smile
1 CVEs affecting Fasterxml Jackson-Dataformat-Smile. Latest disclosed: 2026-10-28. Critical: 0, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-104895 | High | 7.5 | 2026-10-28 | The asynchronous Smile parser (NonBlockingByteArrayParser) uses a raw-binary length prefix taken from untrusted input to allocate a byte[] before the body is r… |