CVE-2026-29062: Jackson Core Context Depth Bypass
Direct creation of child contexts via the stream read context bypasses maximum nesting depth validation defined in `StreamReadConstraints`. This can lead to uncontrolled resource consumption and a StackOverflowError or Denial of Service (DoS) when deeply nested documents are parsed. Delegate these operations to `createChildArrayContext` and `createChildObjec
Javagreprules fetch cve-2026-29062-jackson-core-context-depth-bypass --engine opengrepDescription
Direct creation of child contexts via the stream read context bypasses maximum nesting depth validation defined in `StreamReadConstraints`. This can lead to uncontrolled resource consumption and a StackOverflowError or Denial of Service (DoS) when deeply nested documents are parsed. Delegate these operations to `createChildArrayContext` and `createChildObjec
Community feedback
0 rule-level signals from signed-in users.
- Useful reports
- 0
- Context false positives
- 0
- Metadata suggestions
- 0
Contextual precision
Aggregated from approved scan feedback. False-positive reports describe observed scan contexts, not a global rule verdict.
- Findings observed
- 0
- Projects
- 0
- Reporters
- 0
Precision details are collecting more signed-in reports before verdict counts or ratios are emphasized.
No approved finding verdicts yet.
No scan diagnostics reported yet.