Jackson Release 2.13.3

Patch version of 2.13, being under development as of March 6, 2022. (2.13.2 was released on 06-March-2022).

Following fixes will be included in this patch release.

Changes, core

Streaming

• #744: Limit size of exception message in BigDecimalParser

None yet

Databind

• #2816: Optimize UntypedObjectDeserializer wrt recursion [CVE-2020-36518]
• #3412: Version 2.13.2 uses Method.getParameterCount() which is not supported on Android before API 26
• #3446: java.lang.StringBuffer cannot be deserialized
• #3450: DeserializationProblemHandler is not working with wrapper type when returning null

Changes, data formats

Ion

• #: