ROOT-APP-MAVEN-CVE-2026-54516 CVE-2026-54516 in com.fasterxml.jackson.core:jackson-databind - Patched by Root

Root has patched CVE-2026-54516 in the com.fasterxml.jackson.core:jackson-databind package for Root:Maven. Multiple fixed versions available...

ROOT-APP-MAVEN-CVE-2026-54518 CVE-2026-54518 in com.fasterxml.jackson.core:jackson-databind - Patched by Root

Root has patched CVE-2026-54518 in the com.fasterxml.jackson.core:jackson-databind package for Root:Maven. Multiple fixed versions available...

ROOT-APP-MAVEN-CVE-2026-54517 CVE-2026-54517 in com.fasterxml.jackson.core:jackson-databind - Patched by Root

Root has patched CVE-2026-54517 in the com.fasterxml.jackson.core:jackson-databind package for Root:Maven. Multiple fixed versions available...

ROOT-APP-MAVEN-CVE-2026-54515 CVE-2026-54515 in com.fasterxml.jackson.core:jackson-databind - Patched by Root

Root has patched CVE-2026-54515 in the com.fasterxml.jackson.core:jackson-databind package for Root:Maven. Multiple fixed versions available...

ROOT-APP-MAVEN-CVE-2026-54514 CVE-2026-54514 in com.fasterxml.jackson.core:jackson-databind - Patched by Root

Root has patched CVE-2026-54514 in the com.fasterxml.jackson.core:jackson-databind package for Root:Maven. Multiple fixed versions available...

MiracleLinux 9 : jackson-core-2.21.6-1.el9_8, jackson-databind-2.21.6-1.el9_8, jackson-jaxrs-providers-2.21.6-1.el9_8, jackson-modules-base-2.21.6-1.el9_8 (AXSA:2026-2065:01)

The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-2065:01 advisory. com.fasterxml.jackson.core/jackson-databind: tools.jackson.core/jackson-databind: jackson-databind: CPU Denial of Service via unbounded numeric parsing...

Important: Red Hat Security Advisory: Red Hat build of Quarkus 3.33.4 release and security update

An update is now available for Red Hat build of Quarkus. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability. For more informatio...

Important: Red Hat Security Advisory: Red Hat build of Quarkus 3.27.6 release and security update

An update is now available for Red Hat build of Quarkus. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability. For more informatio...

ROOT-APP-MAVEN-CVE-2026-77310 CVE-2026-77310 in com.fasterxml.jackson.core:jackson-databind - Patched by Root

Root has patched CVE-2026-77310 in the com.fasterxml.jackson.core:jackson-databind package for Root:Maven. Multiple fixed versions available...

ROOT-APP-MAVEN-CVE-2026-59889 CVE-2026-59889 in com.fasterxml.jackson.core:jackson-databind - Patched by Root

Root has patched CVE-2026-59889 in the com.fasterxml.jackson.core:jackson-databind package for Root:Maven. Multiple fixed versions available...

Security Bulletin: IBM Guardium Data Protection is affected by multiple vulnerabilities.

Summary IBM Guardium Data Protection has addressed these vulnerabilities in an update. Vulnerability Details CVEID:CVE-2026-54512 DESCRIPTION: jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor. From 2.10.0 until 2.18.8, 2.21.4, and...

Security Bulletin: Due to the use of jackson-databind, IBM Cloud Pak System is affected by Uncontrolled Resource Consumption and Deserialisation of Untrusted Data

Summary Jackson-databind is used internally by IBM Cloud Pak System CVE-2026-83557 and CVE-2026-68497 . These vulnerabilities were addressed in IBM Cloud Pak System version 2.3.6.2. Vulnerability Details CVEID:CVE-2026-83557 DESCRIPTION: DefaultBaseTypeLimitingValidator is the...

Security Bulletin: Security vulnerability has been detected in IBM Security Verify Governance Identity Manager Adapters

Summary IBM Security Verify Governance Identity Manager Adapters are affected by a security vulnerability in the jackson-databind-2.22.1.jar component Vulnerability Details CVEID:CVE-2026-68497 DESCRIPTION: jackson-databind binds a JSON string to a javax.xml.datatype.Duration or...

study-struts2-s2-054_055-jackson-cve-2017-7525_cve-2017-15095

Investigation Report on Struts2 Vulnerabilities S2-054, S2-055 and Jackson Vulnerability CVE-2017-7525, CVE-2017-15095 We have published a summarized article that condenses the key points for easier reading. Recommended for those who want to get an overview first or don't have much time. SSTtechl...

CLEANSTART-2026-WO73143 Forward-reference completion for @JsonIdentityInfo object IDs in FasterXML jackson-databind performs a linear scan of the pending-reference accumulator for every resolved ID

CVE-2026-91777 affects multiple packages. Forward-reference completion for @JsonIdentityInfo object IDs in FasterXML jackson-databind performs a linear scan of the pending-reference accumulator for every resolved ID. See references for individual vulnerability details...

CLEANSTART-2026-CZ82044 jackson-databind's deserializer for java

CVE-2026-19032 affects multiple packages. jackson-databind's deserializer for java. See references for individual vulnerability details...

CLEANSTART-2026-WY72170 jackson-databind binds a JSON string to a javax

CVE-2026-68497 affects multiple packages. jackson-databind binds a JSON string to a javax. See references for individual vulnerability details...

CLEANSTART-2026-XO28910 jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor

Security vulnerability affects the kafka package. jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor...

CLEANSTART-2026-NQ89106 jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor

CVE-2026-54515 affects multiple packages. jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor. See references for individual vulnerability details...

CLEANSTART-2026-AC21815 jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor

CVE-2026-59889 affects multiple packages. jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor. See references for individual vulnerability details...