Known vulnerabilities in FasterXML jackson-dataformat-protobuf
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2026-110747 | jackson-dataformat-protobuf: integer overflow in ProtobufParser._readStringKey() allows OutOfMemoryError from an 8-byte payload | 7.5 High | Oct 28, 2026 |
| CVE-2026-104016 | jackson-dataformat-protobuf: signed integer overflow in string-length paths allows unbounded array allocation and OutOfMemoryError | 7.5 High | Oct 27, 2026 |