ALAS2023-2026-2067: CVEs fixed (Amazon Linux)

ALAS2023-2026-2067 fixes 2 tracked CVEs. Affected systems and fixed versions.

• CVE-2026-68494 HIGH 8.7 The fix released in jackson-core 2.18.6 and 2.21.1 for CVE-2026-18401 (GHSA-72hv-8253-57qq, number length cons
• CVE-2026-18401 MEDIUM 6.9 The non-blocking (asynchronous) JSON parser in jackson-core does not enforce the maxNumberLength constraint de

Applies to

• Amazon Linux 2023

← Back to latest CVEs