CVEs published October 2, 2022
2 CVEs were published on October 2, 2022: 0 critical, 2 high.
- Published
- 2
- Critical
- 0
- High
- 2
- Medium
- 0
- Low
- 0
- Unrated
- 0
- Now in CISA KEV
- 0
- Fix available
- 2
Most affected products
- com.fasterxml.jackson.core:jackson-databind
- 2
High 2
- CVE-2022-42003In FasterXML jackson-databind before versions 2.13.4.1 and 2.12.17.1, resource exhaustion can occur because of a lack of a check in primitivcom.fasterxml.jackson.core:jackson-databind
- CVE-2022-42004In FasterXML jackson-databind before 2.13.4, resource exhaustion can occur because of a lack of a check in BeanDeserializer._deserializeFromcom.fasterxml.jackson.core:jackson-databind