Security update for jackson-annotations, jackson-bom, jackson-core, jackson-databind, jackson-dataformat-xml, jackson-dataformats-binary, jackson-modules-base

This update for jackson-annotations, jackson-bom, jackson-core, jackson-databind, jackson-dataformat-xml, jackson-dataformats-binary, jackson-modules-base fixes the following issues: CVE-2026-18401: Number Length Constraint Bypass in Async Parser Can Lead to Potential Processing Time Issues...

SUSE-SU-2026:4394-1 Security update for jackson-annotations, jackson-bom, jackson-core, jackson-databind, jackson-dataformat-xml, jackson-dataformats-binary, jackson-modules-base

This update for jackson-annotations, jackson-bom, jackson-core, jackson-databind, jackson-dataformat-xml, jackson-dataformats-binary, jackson-modules-base fixes the following issues: - CVE-2026-18401: Number Length Constraint Bypass in Async Parser Can Lead to Potential Processing Time Issues...

jackson-dataformat-csv-2.18.11-1.1 on GA media (moderate)

jackson-dataformat-csv-2.18.11-1.1 on GA media Announcement ID: openSUSE-SU-2026:11879-1 Rating: moderate Cross-References: CVE-2026-85278 CVSS scores: CVE-2026-85278 SUSE : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2026-85278 SUSE : 8.7...

OPENSUSE-SU-2026:11879-1 jackson-dataformat-csv-2.18.11-1.1 on GA media

These are all security issues fixed in the jackson-dataformat-csv-2.18.11-1.1 package on the GA media of openSUSE Tumbleweed...

PT-2026-99157

This update for jackson-annotations, jackson-bom, jackson-core, jackson-databind, jackson-dataformat-xml, jackson-dataformats-binary, jackson-modules-base fixes the following issues: - CVE-2026-18401: Number Length Constraint Bypass in Async Parser Can Lead to Potential Processing Time Issues...

PT-2026-99158

These are all security issues fixed in the jackson-dataformat-csv-2.18.11-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11878-1 jackson-dataformat-cbor-2.18.11-1.1 on GA media

These are all security issues fixed in the jackson-dataformat-cbor-2.18.11-1.1 package on the GA media of openSUSE Tumbleweed...

PT-2026-99155

This update for jackson-annotations, jackson-bom, jackson-core, jackson-databind, jackson-dataformat-xml, jackson-dataformats-binary, jackson-modules-base fixes the following issues: - CVE-2026-18401: Number Length Constraint Bypass in Async Parser Can Lead to Potential Processing Time Issues...

PT-2026-99156

This update for jackson-annotations, jackson-bom, jackson-core, jackson-databind, jackson-dataformat-xml, jackson-dataformats-binary, jackson-modules-base fixes the following issues: - CVE-2026-18401: Number Length Constraint Bypass in Async Parser Can Lead to Potential Processing Time Issues...

ROOT-APP-MAVEN-CVE-2023-3894 CVE-2023-3894 in com.fasterxml.jackson.dataformat:jackson-dataformat-toml - Patched by Root

Root has patched CVE-2023-3894 in the com.fasterxml.jackson.dataformat:jackson-dataformat-toml package for Root:Maven. Multiple fixed versions available...

ROOT-APP-MAVEN-CVE-2020-28491 CVE-2020-28491 in io.root.com.fasterxml.jackson.dataformat:jackson-dataformat-cbor - Patched by Root

Root has patched CVE-2020-28491 in the io.root.com.fasterxml.jackson.dataformat:jackson-dataformat-cbor package for Root:Maven. Multiple fixed versions available...

Unity Linux 20.1050e / 20.1060e / 20.1070-8ae / 20.1070e Security Update: jackson-dataformats-binary (UTSA-2026-016707)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-016707 advisory. This affects the package com.fasterxml.jackson.dataformat:jackson-dataformat-cbor from 0 and before 2.11.4, from 2.12.0-rc1 and before 2.12.1. Unchecked allocation o...

EUVD-2021-2417

Malware in sbrugna...

Linux Distros Unpatched Vulnerability : CVE-2016-3720

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - XML external entity XXE vulnerability in XmlMapper in the Data format extension for Jackson aka jackson-dataformat-xml allows attackers to have unspecified impa...

Linux Distros Unpatched Vulnerability : CVE-2016-7051

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - XmlMapper in the Jackson XML dataformat component aka jackson-dataformat-xml before 2.7.8 and 2.8.x before 2.8.4 allows remote attackers to conduct server-side...

Linux Distros Unpatched Vulnerability : CVE-2020-28491

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - This affects the package com.fasterxml.jackson.dataformat:jackson-dataformat-cbor from 0 and before 2.11.4, from 2.12.0-rc1 and before 2.12.1. Unchecked...

OPENSUSE-SU-2024:11582-1 jackson-dataformat-cbor-2.13.0-1.1 on GA media

These are all security issues fixed in the jackson-dataformat-cbor-2.13.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:13151-1 jackson-dataformat-csv-2.15.2-1.1 on GA media

These are all security issues fixed in the jackson-dataformat-csv-2.15.2-1.1 package on the GA media of openSUSE Tumbleweed...

The vulnerability of the.fasterxml.jackson.dataformat:jackson-dataformat-cbor package from the jackson-dataformats-binary library allows a attacker to trigger a service failure.

The vulnerability of the com.fasterxml.jackson.dataformat:jackson-dataformat-cbor package in the jackson-dataformats-binary library is related to the allocation of unlimited memory. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

Deserialization of Untrusted Data in apache-submarine

Apache Software Foundation Apache Submarine has a bug when serializing against yaml. The bug is caused by snakeyaml https://nvd.nist.gov/vuln/detail/CVE-2022-1471 . Apache Submarine uses JAXRS to define REST endpoints. In order to handle YAML requests using application/yaml content-type, it defin...