{"resultsPerPage":1,"startIndex":0,"totalResults":1,"format":"NVD_CVE","version":"2.0","timestamp":"2026-11-12T01:40:17.203","vulnerabilities":[{"cve":{"id":"CVE-2026-122096","sourceIdentifier":"security@apache.org","published":"2026-11-11T13:17:17.057","lastModified":"2026-11-11T13:17:17.057","vulnStatus":"Received","cveTags":[],"descriptions":[{"lang":"en","value":"Uncontrolled Resource Consumption vulnerability in the sketch deserialization of Apache DataSketches Java.\n\n\n\nSeveral deserializers trusted sizes and counts declared in the serialized input. A small crafted input could make an application allocate an excessive amount of memory, leading to an OutOfMemoryError. A crafted string passed to FrequentLongsSketch.getInstance(String) could also make deserialization, or a later update, loop indefinitely. Only applications that deserialize sketches from untrusted sources are affected.\n\n\n\nThis issue affects Apache DataSketches Java: through 9.0.0.\n\n\n\nUsers are recommended to upgrade to version 9.1.0, which fixes the issue."}],"affected":[{"source":"security@apache.org","affectedData":[{"vendor":"Apache Software Foundation","product":"Apache DataSketches Java","defaultStatus":"unaffected","collectionURL":"https://repo.maven.apache.org/maven2","packageName":"org.apache.datasketches:datasketches-java","packageURL":"pkg:maven/org.apache.datasketches/datasketches-java","versions":[{"version":"0","lessThanOrEqual":"9.0.0","versionType":"semver","status":"affected"}]}]}],"metrics":{},"weaknesses":[{"source":"security@apache.org","type":"Primary","description":[{"lang":"en","value":"CWE-400"},{"lang":"en","value":"CWE-789"},{"lang":"en","value":"CWE-835"}]}],"references":[{"url":"https://github.com/apache/datasketches-java/pull/777","source":"security@apache.org"},{"url":"https://github.com/apache/datasketches-java/pull/783","source":"security@apache.org"},{"url":"https://github.com/apache/datasketches-java/releases/tag/9.1.0","source":"security@apache.org"},{"url":"https://lists.apache.org/thread/9wd7ngmho7hm8x74sq1p2fp1xgjd8kt6","source":"security@apache.org"},{"url":"http://www.openwall.com/lists/oss-security/2026/11/10/29","source":"af854a3a-2127-422b-91ae-364da2661108"}]}}]}