Lucene search
+L

3 matches found

NVD
NVD
added 2026/07/14 5:17 p.m.24 views

CVE-2026-59888

jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor. From 2.15.0 until 2.18.8, 2.21.4, and 3.1.4, Java Records using a PropertyNamingStrategy can bypass @JsonIgnore because POJOPropertiesCollector.removeUnwantedIgnorals records an...

6.5CVSS0.00247EPSS
SaveExploits0References4
Debian CVE
Debian CVE
added 2026/07/14 4:44 p.m.11 views

CVE-2026-59888

jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor. From 2.15.0 until 2.18.8, 2.21.4, and 3.1.4, Java Records using a PropertyNamingStrategy can bypass @JsonIgnore because POJOPropertiesCollector.removeUnwantedIgnorals records an...

6.5CVSS5.2AI score0.00247EPSS
SaveExploits0
OSV
OSV
added 2026/07/14 4:44 p.m.5 views

CVE-2026-59888 jackson-databind: @JsonIgnore on a Record property is bypassed with a PropertyNamingStrategy

jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor. From 2.15.0 until 2.18.8, 2.21.4, and 3.1.4, Java Records using a PropertyNamingStrategy can bypass @JsonIgnore because POJOPropertiesCollector.removeUnwantedIgnorals records an...

6.5CVSS6.1AI score
SaveExploits0References6
Rows per page
Query Builder