CVE-2022-41966

CVE-2022-41966 is a high-severity denial-of-service vulnerability affecting XStream versions prior to 1.4.20. A remote attacker can exploit this flaw by manipulating the input stream, causing a stack overflow and terminating the application. This attack leverages recursive hash calculations in collections and maps. The vulnerability has a CVSS score of 7.5, indicating a network-based attack with low complexity and high impact on availability. While there is no known active exploitation or public exploit code, the vulnerability has garnered some community discussion and media coverage, including its mention in Atlassian's security patches.