CVE-2020-11113

CVE-2020-11113 CVE-2020-11113:Jackson-databind RCE...

CVE-2020-36188

Description FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to com.newrelic.agent.deps.ch.qos.logback.core.db.JNDIConnectionSource How to RCE pom.xml com.fasterxml.jackson.core jackson-databind 2.9.10.7...

CVE-2020-10673

CVE-2020-10673 CVE-2020-10673:jackson-databind RCE...

CVE-2020-36184

Description FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp2.datasources.PerUserPoolDataSource. How to RCE pom.xml 4.0.0 com.jacksonTest jacksonTest 1.0-SNAPSHOT com.fasterxml.jackson.core...

CVE-2020-35728

Description FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to com.oracle.wls.shaded.org.apache.xalan.lib.sql.JNDIConnectionPool aka embedded Xalan in org.glassfish.web/javax.servlet.jsp.jstl. How to RCE pom.xml 4.0.0...

Security Bulletin: Vulnerabilities found in jackson-databind , addressed in APIM

Summary jackson-databind is upgraded and vulnerabilities are addressed in APIM 11.1 Vulnerability Details CVEID:CVE-2026-54512 DESCRIPTION: jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor. From 2.10.0 until 2.18.8, 2.21.4, and...

Security Bulletin: Due to the use of jackson-databind, IBM Sterling Control Center is vulnerable to Uncontrolled Resource Consumption (CVE-2026-68497)

Summary Jackson-databind is used by IBM Sterling Control Center as part of dependency in jackson-databind-2.17.1.jar Vulnerability Details CVEID:CVE-2026-68497 DESCRIPTION: jackson-databind binds a JSON string to a javax.xml.datatype.Duration or javax.xml.datatype.XMLGregorianCalendar field by...

CVE-2017-7525-Jackson-Deserialization-Lab

CVE-2017-7525 Java Insecure Deserialization Lab Basic Java REST application vulnerable to Insecure Deserialization, leading to RCE. The project must be run on Java 8u45 Based on Maven with the following dependencies: jackson-databind 2.2.2 commons-collections 3.1 spring-context-support 4.3.11 Mor...

CVE-2020-14195

SimpleTest This is a simple test for FasterXML jackson-databind...

CVE-2026-91777

A flaw was found in FasterXML jackson-databind. This vulnerability allows a remote attacker to cause a Denial of Service DoS by providing specially crafted JSON input to an application that deserializes it into an identity-enabled collection or map. The flaw occurs due to inefficient processing o...

study-struts2-s2-054_055-jackson-cve-2017-7525_cve-2017-15095

Investigation Report on Struts2 Vulnerabilities S2-054, S2-055 and Jackson Vulnerability CVE-2017-7525, CVE-2017-15095 We have published a summarized article that condenses the key points for easier reading. Recommended for those who want to get an overview first or don't have much time. SSTtechl...

fastjson

fastjson Fastjson is a Java library that can be used to convert Java Objects into their JSON representation. It can also be used to convert a JSON string to an equivalent Java object. Fastjson can work with arbitrary Java objects including pre-existing objects that you do not have source-code of...

CVE-2026-91776

A flaw was found in jackson-databind. A remote attacker can exploit this vulnerability by repeatedly supplying distinct, unrecognized type identifiers to an application configured with name-based polymorphism and a fallback deserializer. This action causes the TypeDeserializerBase component to...

Security Bulletin: IBM webMethods BPM is vulnerable to a denial of service due to jackson-databind

Summary IBM webMethods BPM uses Jackson Databind to serialize and deserialize JSON data between BPM processes, REST APIs, and Java objects. Vulnerability Details CVEID:CVE-2026-59888 DESCRIPTION: jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson...

Security Bulletin: Multiple security vulnerabilities are addressed with IBM Process Mining 2.2.1

Summary Multiple vulnerabilities were addressed in IBM Process Mining 2.2.1 Vulnerability Details CVEID:CVE-2026-19032 DESCRIPTION: jackson-databind's deserializer for java.nio.file.Path resolves an attacker-supplied URI without restricting the URI scheme. In...

Security Bulletin: IBM Maximo Manage application in IBM Maximo Application Suite uses jackson-databind-2.18.9.jar and httpclient5-5.3.1.jar and is vulnerable to CVE-2026-19032, CVE-2026-83557, CVE-2026-68497 and CVE-2026-64607

Summary IBM Maximo Manage application in IBM Maximo Application Suite uses jackson-databind-2.18.9.jar and httpclient5-5.3.1.jar and is vulnerable to CVE-2026-19032, CVE-2026-83557, CVE-2026-68497 and CVE-2026-64607. This bulletin contains information regarding these vulnerabilities and their...

CLEANSTART-2026-MD90103 jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor

Security vulnerability affects the apache-nifi package. jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor...

CLEANSTART-2026-GQ65848 jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor

Security vulnerability affects the apache-nifi package. jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor...

CLEANSTART-2026-OF13352 jackson-databind binds a JSON string to a javax

Security vulnerability affects the apache-nifi package. jackson-databind binds a JSON string to a javax...

CLEANSTART-2026-WH10300 jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor

Security vulnerability affects the apache-nifi package. jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor...