← All credits

manqingzhou

2 vulnerability records and advisories credit this contributor.

CVE-2026-89425
jackson-core: UTF8DataInputJsonParser._reportInvalidToken() does not honor maxErrorTokenLength, allowing unbounded StringBuilder growth
CVE-2026-89407
jackson-core: quadratic backtracking in NumberInput.PATTERN_FLOAT via looksLikeValidNumber() enables ReDoS