CVE-2026-110879

The jackson-databind library (com.fasterxml.jackson.core:jackson-databind from version 2.10.0 and tools.jackson.core:jackson-databind from version 3.0.0 ) contains a PolymorphicTypeValidator bypass. The vulnerability occurs because the library validates the outer class of a class-name type ID but...