CVE-2023-35116 (jackson-databind)

** DISPUTED ** An issue was discovered jackson-databind thru 2.15.2 allows attackers to cause a denial of service or other unspecified impacts via crafted object that uses cyclic dependencies. NOTE: the vendor's perspective is that the product is not intended for use with untrusted input.

attackers cve denial of service dependencies input issue jackson jackson-databind object perspective product service untrusted vendor