CVE-2026-104895 — jackson-dataformat-smile: unbounded eager byte[] allocation for raw binary in the async parser allows OutOfMemoryError
CVE-2026-104895 concerns jackson-dataformat-smile. The async parser performs unbounded eager byte[] allocation for raw binary, allowing an OutOfMemoryError.
CERT24