EUVD-2023-27901

Malicious code in bioql PyPI...

EUVD-2022-1319

Malicious code in bioql PyPI...

EUVD-2023-41810

Malicious code in bioql PyPI...

EUVD-2023-0856

Malicious code in bioql PyPI...

EUVD-2022-7159

Malicious code in bioql PyPI...

EUVD-2022-5362

Malicious code in bioql PyPI...

EUVD-2023-2347

Malicious code in bioql PyPI...

EUVD-2022-6411

Malicious code in bioql PyPI...

EUVD-2025-17366

Malicious code in bioql PyPI...

Security Bulletin: IBM Watson Discovery Cartridge affected by vulnerability in jackson-core-2.10.3.jar

Summary IBM Watson Discovery Cartridge contains a vulnerable version of jackson-core-2.10.3.jar Vulnerability Details CVEID:CVE-2025-49128 DESCRIPTION: Jackson-core contains core low-level incremental "streaming" parser and generator abstractions used by Jackson Data Processor. Starting in versio...

OSV-2025-765 Security exception in com.spotify.docker.client.shaded.com.fasterxml.jackson.databind.util.TokenBuffer

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=446027675 Crash type: Security exception Crash state: com.spotify.docker.client.shaded.com.fasterxml.jackson.databind.util.TokenBuffer java.base/java.lang.StringUTF16.newBytesFor java.base/java.lang.StringUTF16.toBytes...

The vulnerability of the Jackson-Core library from the FasterXML project allows attackers to compromise the accessibility of protected information.

The vulnerability of the Jackson-Core library from the FasterXML project is related to buffer overflows based on a stack mechanism. Exploiting this vulnerability can allow an attacker to compromise the accessibility of the protected information...

marshalsec

It is an offensive tool for Java deserialization vulnerabilities. The repository contains a Java tool called "marshalsec" that exploits Java object deserialization vulnerabilities, allowing for remote code execution. The tool includes payload generators for various Java serialization libraries,...

BIT-NIFI-2021-20190

A flaw was found in jackson-databind before 2.9.10.7. FasterXML mishandles the interaction between serialization gadgets and typing. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability...

com.fasterxml.jackson.core/jackson-core: jackson-core Potential StackoverflowError

A nested data handling flaw was found in Jackson Core. When parsing particularly deeply nested data structures, a StackoverflowError can occur...

Important: Red Hat Security Advisory: Red Hat Single Sign-On 7.6.12 security update

A new security update is now available for Red Hat Single Sign-On 7.6 from the Customer Portal. Red Hat Single Sign-On 7.6 is a standalone server, based on the Keycloak project, that provides authentication and standards-based single sign-on capabilities for web and mobile applications. This upda...

pki-deps:10.6 security update

An update is available for module.relaxngDatatype, module.jackson-core, apache-commons-collections, module.xml-commons-apis, glassfish-jaxb-api, apache-commons-net, xalan-j2, xmlstreambuffer, xsom, xml-commons-apis, module.slf4j, stax-ex, module.glassfish-jaxb-api, module.bea-stax, relaxngDatatyp...

RLSA-2025:14126 Important: pki-deps:10.6 security update

The Public Key Infrastructure PKI Core contains fundamental packages required by Rocky Enterprise Software Foundation Certificate System. Security Fixes: com.fasterxml.jackson.core/jackson-core: jackson-core Potential StackoverflowError CVE-2025-52999 For more details about the security issues,...

RockyLinux 8 : pki-deps:10.6 (RLSA-2025:14126)

The remote RockyLinux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2025:14126 advisory. com.fasterxml.jackson.core/jackson-core: jackson-core Potential StackoverflowError CVE-2025-52999 Tenable has extracted the preceding description block directly...

Security Bulletin: Fixes to common vulnerabilities discovered in Cloudera Data Platform 7.1.7 SP2

Summary Fixes to common vulnerabilities discovered in Cloudera Data Platform 7.1.7 SP2 are available to download from Cloudera and IBM. Vulnerability Details CVEID:CVE-2017-7657 DESCRIPTION: Eclipse Jetty is vulnerable to HTTP request smuggling, caused by improper handling of Chunked...