WS-2022-0468 | Mend Vulnerability Database

Vulnerability DatabaseWS-2022-0468

WS-2022-0468

Published:May 15, 2026

Updated:May 15, 2026

The jackson-core package is vulnerable to a Denial of Service (DoS) attack. The methods in the classes listed below fail to restrict input size when performing numeric type conversions. A remote attacker can exploit this vulnerability by causing the application to deserialize data containing certain numeric types with large values. Deserializing many of the aforementioned objects may cause the application to exhaust all available resources, resulting in a DoS condition.

Affected Packages

pyspark (CONDA):

Affected version(s) >=3.3.0 <3.3.2

Fix Suggestion:

Update to version 3.3.2

fiji (CONDA):

Affected version(s) >=20220414 <20250206

Fix Suggestion:

Update to version 20250206

pyspark (CONDA):

Affected version(s) >=2.1.0 <3.2.3

Fix Suggestion:

Update to version 3.2.3

mzmine (CONDA):

Affected version(s) >=3.6.0 <=3.9.0

Fix Suggestion:

Update to version no_fix

mpa-portable (CONDA):

Affected version(s) >=1.4.1 <=2.0.0

Fix Suggestion:

Update to version no_fix

gorpipe (CONDA):

Affected version(s) =4.5.0

Fix Suggestion:

Update to version no_fix

gradle (CONDA):

Affected version(s) >=6.4.0 <=7.4.2

Fix Suggestion:

Update to version no_fix

beakerx (CONDA):

Affected version(s) >=0.3.0.dev0 <=1.4.1

Fix Suggestion:

Update to version no_fix

pepquery (CONDA):

Affected version(s) >=1.3.0 <=2.0.2

Fix Suggestion:

Update to version no_fix

tassel (CONDA):

Affected version(s) =5.2.89

Fix Suggestion:

Update to version no_fix

ixmp (CONDA):

Affected version(s) >=2.0.0 <3.6.0

Fix Suggestion:

Update to version 3.6.0

pyreportjasper (CONDA):

Affected version(s) >=1.0.2 <=2.1.0

Fix Suggestion:

Update to version no_fix

r-awr (CONDA):

Affected version(s) =1.11.189 <1.11.189_1

Fix Suggestion:

Update to version 1.11.189_1

pepgenome (CONDA):

Affected version(s) =1.1.beta

Fix Suggestion:

Update to version no_fix

openrefine (CONDA):

Affected version(s) >=2.7 <=3.5.0

Fix Suggestion:

Update to version no_fix

sirius-csifingerid (CONDA):

Affected version(s) >=4.9.3 <5.8.2

Fix Suggestion:

Update to version 5.8.2

pyspark (CONDA):

Affected version(s) =3.4.1 <3.5.0

Fix Suggestion:

Update to version 3.5.0

nextflow (CONDA):

Affected version(s) =23.04.1 <23.04.3

Fix Suggestion:

Update to version 23.04.3

womtool (CONDA):

Affected version(s) >=31 <50

Fix Suggestion:

Update to version 50

flapjack (CONDA):

Affected version(s) >=1.16.10.31 <=1.20.10.07

Fix Suggestion:

Update to version no_fix

nextflow (CONDA):

Affected version(s) =23.10.0

Fix Suggestion:

Update to version no_fix

nextflow (CONDA):

Affected version(s) =0.31.1 <0.32.0

Fix Suggestion:

Update to version 0.32.0

dsh-bio (CONDA):

Affected version(s) >=2.1 <2.3

Fix Suggestion:

Update to version 2.3

igv (CONDA):

Affected version(s) >=2.8.4 <2.8.10

Fix Suggestion:

Update to version 2.8.10

nextflow (CONDA):

Affected version(s) >=0.27.0 <0.31.0

Fix Suggestion:

Update to version 0.31.0

peptide-shaker (CONDA):

Affected version(s) >=2.0.5 <=3.0.1

Fix Suggestion:

Update to version no_fix

interproscan (CONDA):

Affected version(s) >=5.52_86.0 <=5.59_91.0

Fix Suggestion:

Update to version no_fix

watchdog-wms (CONDA):

Affected version(s) >=2.0.6 <=2.0.8

Fix Suggestion:

Update to version no_fix

nextflow (CONDA):

Affected version(s) >=19.01.0 <21.04.0

Fix Suggestion:

Update to version 21.04.0

wdltool (CONDA):

Affected version(s) >=0.6 <=0.14

Fix Suggestion:

Update to version no_fix

igvtools (CONDA):

Affected version(s) >=2.14.1 <=2.16.2

Fix Suggestion:

Update to version no_fix

cromwell (CONDA):

Affected version(s) >=0.19.4 <40

Fix Suggestion:

Update to version 40

gradle (CONDA):

Affected version(s) >=5.3.1 <6.3.0

Fix Suggestion:

Update to version 6.3.0

womtool (CONDA):

Affected version(s) =52 <53

Fix Suggestion:

Update to version 53

igv (CONDA):

Affected version(s) >=2.8.0 <2.8.3

Fix Suggestion:

Update to version 2.8.3

igv (CONDA):

Affected version(s) >=2.8.11 <=2.16.2

Fix Suggestion:

Update to version no_fix

flyway.commandline (NUGET):

Affected version(s) >=7.7.3 <9.22.1

Fix Suggestion:

Update to version 9.22.1

microsoft.azure.workflows.webjobs.extension (NUGET):

Affected version(s) >=1.2.18 <1.94.71

Fix Suggestion:

Update to version 1.94.71

allurereport.generator (NUGET):

Affected version(s) =0.1.0

Fix Suggestion:

Update to version no_fix

dynatrace.oneagent.xamarin (NUGET):

Affected version(s) >=8.233.0 <8.273.1

Fix Suggestion:

Update to version 8.273.1

mases.knetconnect (NUGET):

Affected version(s) >=1.4.7 <2.7.0

Fix Suggestion:

Update to version 2.7.0

jetbrains.rider.frontend4 (NUGET):

Affected version(s) =202.0.20201215.161733 <202.0.20200820.182208

Fix Suggestion:

Update to version 202.0.20200820.182208

mases.kafkabridgecli (NUGET):

Affected version(s) >=1.1.7 <=1.1.11

Fix Suggestion:

Update to version no_fix

mases.knet (NUGET):

Affected version(s) >=1.2.0 <2.7.0

Fix Suggestion:

Update to version 2.7.0

dynatrace.oneagent.maui (NUGET):

Affected version(s) >=1.265.1 <1.273.1

Fix Suggestion:

Update to version 1.273.1

oraclenosqldriver (NUGET):

Affected version(s) >=12.4.5 <=12.4.5.4

Fix Suggestion:

Update to version no_fix

gridgain (NUGET):

Affected version(s) =8.8.38 <8.8.39

Fix Suggestion:

Update to version 8.8.39

jetbrains.rider.frontend2 (NUGET):

Affected version(s) =203.0.20201229.161815 <203.0.20200923.135724-eap01

Fix Suggestion:

Update to version 203.0.20200923.135724-eap01

jmeter (NUGET):

Affected version(s) >=5.4.3 <5.6.3

Fix Suggestion:

Update to version 5.6.3

logstash-binary (NUGET):

Affected version(s) >=7.8.0 <=7.8.1

Fix Suggestion:

Update to version no_fix

appdynamics.azure.siteextension.java (NUGET):

Affected version(s) >=20.3.0 <20.6.0.1

Fix Suggestion:

Update to version 20.6.0.1

datax.spark (NUGET):

Affected version(s) =1.0.0-CI-20190314-231915

Fix Suggestion:

Update to version no_fix

appdynamics.azure.siteextension.javaagent (NUGET):

Affected version(s) >=21.6.1 <24.3.1

Fix Suggestion:

Update to version 24.3.1

gridgain (NUGET):

Affected version(s) >=8.9.0.1 <8.9.4

Fix Suggestion:

Update to version 8.9.4

mases.kafkabridge (NUGET):

Affected version(s) >=1.1.2 <=1.1.11

Fix Suggestion:

Update to version no_fix

oracle.kv.client (NUGET):

Affected version(s) =12.4.20170407 <12.4.1

Fix Suggestion:

Update to version 12.4.1

jetbrains.rider.frontend2 (NUGET):

Affected version(s) =203.0.20210317.94906 <203.0.20201127.95230-eap09

Fix Suggestion:

Update to version 203.0.20201127.95230-eap09

royalroad.maui.gradle.packages (NUGET):

Affected version(s) =0.0.3-alpha

Fix Suggestion:

Update to version no_fix

mases.knetcli (NUGET):

Affected version(s) >=1.2.0 <2.7.0

Fix Suggestion:

Update to version 2.7.0

flyway.commandline.jre (NUGET):

Affected version(s) >=7.15.0 <9.22.1

Fix Suggestion:

Update to version 9.22.1

gridgain (NUGET):

Affected version(s) >=8.7.6 <8.8.37.1

Fix Suggestion:

Update to version 8.8.37.1

rdpascua/jasperstarter (PHP):

Affected version(s) =3.6.2

Fix Suggestion:

Update to version no_fix

a.ambrogini/phpjasper (PHP):

Affected version(s) >=v2.7 <=2.8

Fix Suggestion:

Update to version no_fix

vufind/vufind (PHP):

Affected version(s) >=dev-release-3.0 <v3.1

Fix Suggestion:

Update to version v3.1

copam/phpjasper (PHP):

Affected version(s) >=dev-master <1.4

Fix Suggestion:

Update to version 1.4

lavela/phpjasper (PHP):

Affected version(s) >=v1.3 <v2.0

Fix Suggestion:

Update to version v2.0

smart145/phpjasper (PHP):

Affected version(s) =dev-develop <dev-master

Fix Suggestion:

Update to version dev-master

vufind/vufind (PHP):

Affected version(s) =dev-feature/foundation5 <dev-release-5.0

Fix Suggestion:

Update to version dev-release-5.0

cossou/jasperphp (PHP):

Affected version(s) >=dev-allow-string-parameters <=dev-pr/79

Fix Suggestion:

Update to version no_fix

anshul-netgen/jasper-report (PHP):

Affected version(s) =dev-master

Fix Suggestion:

Update to version no_fix

smart145/phpjasper (PHP):

Affected version(s) =3.3.1 <3.3.2

Fix Suggestion:

Update to version 3.3.2

copam/phpjasper (PHP):

Affected version(s) =v1.4 <v1.5

Fix Suggestion:

Update to version v1.5

polozpavlo/allure (PHP):

Affected version(s) =dev-master

Fix Suggestion:

Update to version no_fix

codelab/flaskphp-identity-esteid (PHP):

Affected version(s) >=v2.0.7 <=v3.0.7

Fix Suggestion:

Update to version no_fix

davidecaruso/jasper-php (PHP):

Affected version(s) =v1.0.2

Fix Suggestion:

Update to version no_fix

daniel-werner/laravel-schemacrawler (PHP):

Affected version(s) =dev-13-migrate-tests-to-github-actions

Fix Suggestion:

Update to version no_fix

sellerbox/phpjasper (PHP):

Affected version(s) =dev-main

Fix Suggestion:

Update to version no_fix

codelab/flaskphp-identity-smartid (PHP):

Affected version(s) =dev-master <v1.0.0

Fix Suggestion:

Update to version v1.0.0

eihen/jasperstarter-bin (PHP):

Affected version(s) >=v3.2.1.0 <v3.4.1.0

Fix Suggestion:

Update to version v3.4.1.0

davidecaruso/jasper-php (PHP):

Affected version(s) >=dev-develop <v1.0.0

Fix Suggestion:

Update to version v1.0.0

ziack/jasperphp (PHP):

Affected version(s) =dev-development <dev-master

Fix Suggestion:

Update to version dev-master

smart145/phpjasper (PHP):

Affected version(s) >=dev-update_packages <v1.1

Fix Suggestion:

Update to version v1.1

ziack/jasperphp (PHP):

Affected version(s) =dev-pr/79

Fix Suggestion:

Update to version no_fix

smart145/phpjasper (PHP):

Affected version(s) =v1.10 <v1.11

Fix Suggestion:

Update to version v1.11

rdpascua/jasperstarter (PHP):

Affected version(s) =dev-main <dev-master

Fix Suggestion:

Update to version dev-master

fazo96/jasperphp (PHP):

Affected version(s) >=v1.0.0 <=v2.3.0

Fix Suggestion:

Update to version no_fix

codelab/flaskphp-identity-smartid (PHP):

Affected version(s) >=v1.4.3 <=v1.6.8

Fix Suggestion:

Update to version no_fix

smart145/phpjasper (PHP):

Affected version(s) =v1.16 <2.0

Fix Suggestion:

Update to version 2.0

codelab/flaskphp-identity-mobileid (PHP):

Affected version(s) >=v1.0.20 <v1.0.22

Fix Suggestion:

Update to version v1.0.22

smart145/phpjasper (PHP):

Affected version(s) >=v1.6 <v1.8

Fix Suggestion:

Update to version v1.8

stesabvba/horizon (PHP):

Affected version(s) =dev-master

Fix Suggestion:

Update to version no_fix

vufind/vufind (PHP):

Affected version(s) =dev-legacy/jquerymobile <dev-legacy/mink-autoretry

Fix Suggestion:

Update to version dev-legacy/mink-autoretry

xidmonx/jasperphp (PHP):

Affected version(s) >=dev-allow-string-parameters <2.7.0

Fix Suggestion:

Update to version 2.7.0

codelab/flaskphp-identity-esteid (PHP):

Affected version(s) =dev-master <v1.0.0

Fix Suggestion:

Update to version v1.0.0

ziack/jasperphp (PHP):

Affected version(s) >=v1.0.0 <2.8.0

Fix Suggestion:

Update to version 2.8.0

copam/phpjasper (PHP):

Affected version(s) =v1.5.x-dev

Fix Suggestion:

Update to version no_fix

dhenyson/jasper-report-php (PHP):

Affected version(s) >=dev-main <=1.0.0

Fix Suggestion:

Update to version no_fix

jheferson-br/phpjasper (PHP):

Affected version(s) =4.0.6

Fix Suggestion:

Update to version no_fix

siu-toba/jasper (PHP):

Affected version(s) >=v5.6 <=v5.6.2

Fix Suggestion:

Update to version no_fix

daniel-werner/laravel-schemacrawler (PHP):

Affected version(s) =dev-dependabot/composer/symfony/http-kernel-5.4.20 <dev-analysis-qrWRb9

Fix Suggestion:

Update to version dev-analysis-qrWRb9

starkliew/jasperphp (PHP):

Affected version(s) >=dev-development <=v2.4.0

Fix Suggestion:

Update to version no_fix

a.ambrogini/phpjasper (PHP):

Affected version(s) >=dev-develop <v1.1

Fix Suggestion:

Update to version v1.1

rdpascua/reporter (PHP):

Affected version(s) =dev-main

Fix Suggestion:

Update to version no_fix

geekcom/phpjasper-laravel (PHP):

Affected version(s) >=v1.0 <=v1.1

Fix Suggestion:

Update to version no_fix

lopezsoft/jasperphp (PHP):

Affected version(s) >=dev-main <=2.9.7

Fix Suggestion:

Update to version no_fix

penblu/jasperphp (PHP):

Affected version(s) =1.0.1

Fix Suggestion:

Update to version no_fix

merlinthemagic/mtm-signal-api (PHP):

Affected version(s) =dev-main

Fix Suggestion:

Update to version no_fix

codelab/flaskphp-identity-smartid (PHP):

Affected version(s) =v1.4.0 <v1.4.1

Fix Suggestion:

Update to version v1.4.1

lavela/phpjasper (PHP):

Affected version(s) =dev-develop <dev-master

Fix Suggestion:

Update to version dev-master

copam/phpjasper7 (PHP):

Affected version(s) >=dev-develop <v1.3

Fix Suggestion:

Update to version v1.3

smart145/phpjasper (PHP):

Affected version(s) >=3.1.0 <3.3.0

Fix Suggestion:

Update to version 3.3.0

nealis/jasperphp (PHP):

Affected version(s) =dev-master

Fix Suggestion:

Update to version no_fix

i4n/phpjasper (PHP):

Affected version(s) =dev-master <1.1.0

Fix Suggestion:

Update to version 1.1.0

smart145/phpjasper (PHP):

Affected version(s) >=dev-add_franklin_gothic_font <dev-century_gothic_font

Fix Suggestion:

Update to version dev-century_gothic_font

dericktan/phpjasper (PHP):

Affected version(s) >=v1.3 <=v1.5.1

Fix Suggestion:

Update to version no_fix

rdpascua/jasperstarter (PHP):

Affected version(s) >=3.1.0 <3.5.0

Fix Suggestion:

Update to version 3.5.0

smart145/phpjasper (PHP):

Affected version(s) >=v2.2 <3.0.1

Fix Suggestion:

Update to version 3.0.1

smart145/phpjasper (PHP):

Affected version(s) =v1.4 <v1.5

Fix Suggestion:

Update to version v1.5

drsoft/laraveljasper (PHP):

Affected version(s) >=dev-main <=v1.0

Fix Suggestion:

Update to version no_fix

chrmorandi/yii2-jasper (PHP):

Affected version(s) >=dev-master <v1.1.1

Fix Suggestion:

Update to version v1.1.1

codelab/flaskphp-identity-mobileid (PHP):

Affected version(s) >=v1.0.29 <=v1.0.44

Fix Suggestion:

Update to version no_fix

vufind/vufind (PHP):

Affected version(s) =dev-legacy/vudl <dev-pullrequest_accessib_turn-my-account-menu-into-ul

Fix Suggestion:

Update to version dev-pullrequest_accessib_turn-my-account-menu-into-ul

codelab/flaskphp-identity-mobileid (PHP):

Affected version(s) =dev-master <v1.0.0

Fix Suggestion:

Update to version v1.0.0

muhammettotan/phpjasper (PHP):

Affected version(s) =dev-master

Fix Suggestion:

Update to version no_fix

a.ambrogini/phpjasper (PHP):

Affected version(s) >=v1.2 <v2.6

Fix Suggestion:

Update to version v2.6

codelab/flaskphp-identity-mobileid (PHP):

Affected version(s) =v1.0.18 <v1.0.19

Fix Suggestion:

Update to version v1.0.19

erw/phpjasperstarter (PHP):

Affected version(s) >=dev-main <=1.0.0

Fix Suggestion:

Update to version no_fix

dstecnologias/phpjasper (PHP):

Affected version(s) =dev-master

Fix Suggestion:

Update to version no_fix

dericktan/phpjasper (PHP):

Affected version(s) >=dev-master <v1.2

Fix Suggestion:

Update to version v1.2

salesfusion/reporter (PHP):

Affected version(s) >=1.0.0 <1.1.4

Fix Suggestion:

Update to version 1.1.4

geekcom/phpjasper (PHP):

Affected version(s) =dev-master <v1.0

Fix Suggestion:

Update to version v1.0

minkbear/phpjasper (PHP):

Affected version(s) >=dev-develop <=3.3.1

Fix Suggestion:

Update to version no_fix

stradaaccellog/phpjasper (PHP):

Affected version(s) >=dev-develop <v1.0

Fix Suggestion:

Update to version v1.0

pyspark (PYTHON):

Affected version(s) =3.4.1 <3.5.0

Fix Suggestion:

Update to version 3.5.0

beakerx (PYTHON):

Affected version(s) >=0.3.0.dev0 <=1.4.1

Fix Suggestion:

Update to version no_fix

nextflow (PYTHON):

Affected version(s) =23.10.0

Fix Suggestion:

Update to version no_fix

ixmp (PYTHON):

Affected version(s) >=2.0.0 <3.6.0

Fix Suggestion:

Update to version 3.6.0

pyspark (PYTHON):

Affected version(s) >=3.3.0 <3.3.2

Fix Suggestion:

Update to version 3.3.2

pyreportjasper (PYTHON):

Affected version(s) >=1.0.2 <=2.1.0

Fix Suggestion:

Update to version no_fix

Related Resources (1)

https://github.com/FasterXML/jackson-core/issues/861

Do you need more information?

CVSS v4

Base Score:

8.7

Attack Vector

NETWORK

Attack Complexity

LOW

Attack Requirements

NONE

Privileges Required

NONE

User Interaction

NONE

Vulnerable System Confidentiality

NONE

Vulnerable System Integrity

NONE

Vulnerable System Availability

HIGH

Subsequent System Confidentiality

NONE

Subsequent System Integrity

NONE

Subsequent System Availability

NONE

CVSS v3

Base Score:

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality

NONE

Integrity

NONE

Availability

HIGH