{"id":"OSV-2025-638","summary":"Security exception in com.fasterxml.jackson.databind.deser.std.UntypedObjectDeserializer$Vanilla.deser","details":"OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=438873397\n\n```\nCrash type: Security exception\nCrash state:\ncom.fasterxml.jackson.databind.deser.std.UntypedObjectDeserializer$Vanilla.deser\ncom.fasterxml.jackson.databind.deser.std.UntypedObjectDeserializer$Vanilla.mapOb\ncom.fasterxml.jackson.core.json.UTF8StreamJsonParser.findName\n```\n","modified":"2025-08-17T14:48:59.288257Z","published":"2025-08-17T00:01:49.946822Z","references":[{"type":"REPORT","url":"https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=438873397"}],"affected":[{"package":{"name":"json2avro","ecosystem":"OSS-Fuzz","purl":"pkg:generic/json2avro"},"ranges":[{"type":"GIT","repo":"https://github.com/allegro/json-avro-converter/","events":[{"introduced":"2973d1546d9e4590f54a029db483d6d8abde808d"},{"fixed":"ad871e8a497003a90da1ff523b18d96e4afbf5c7"},{"introduced":"d92a3390a6213b1caf4b11e26f923bd6501ffb92"}]}],"ecosystem_specific":{"severity":"LOW"},"database_specific":{"fixed_range":"2973d1546d9e4590f54a029db483d6d8abde808d:ad871e8a497003a90da1ff523b18d96e4afbf5c7","introduced_range":"unknown:2973d1546d9e4590f54a029db483d6d8abde808d","source":"https://github.com/google/oss-fuzz-vulns/blob/main/vulns/json2avro/OSV-2025-638.yaml"}}],"schema_version":"1.7.3"}