CWE-400 - Uncontrolled Resource Consumption Warnings

[constantin-baciu]

Hi,

We're using these libraries for several of our projects. All projects, as part of the CI/CD cycle, get verified with owasp-dependency-check.
As of today, we're getting https://cwe.mitre.org/data/definitions/400.html as a level 7.5 error (and our threshold if 7).

Is this something that is being looked at?

Thanks!

[cowtowncoder]

@constantin-baciu Which issue(s)? You are only linking to a description of general classification.

[pjfanning]

This is FasterXML/jackson-core#861

[abdullahali99]

Is there any update on this issue?
what is the plan to release 2.15 ?

[cowtowncoder]

2.15.0 was released on April 23, 2023. Closing.