3660 matches found
CLEANSTART-2026-WQ14313 jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor
CVE-2026-54518 affects multiple packages. jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor. See references for individual vulnerability details...
CLEANSTART-2026-QO27706 jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor
CVE-2026-59888 affects multiple packages. jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor. See references for individual vulnerability details...
CLEANSTART-2026-NN37649 jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor
CVE-2026-59889 affects multiple packages. jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor. See references for individual vulnerability details...
CLEANSTART-2026-LY52990 jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor
CVE-2026-77310 affects multiple packages. jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor. See references for individual vulnerability details...
CLEANSTART-2026-ZG74825 jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor
CVE-2026-54516 affects multiple packages. jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor. See references for individual vulnerability details...
CLEANSTART-2026-RR27418 jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor
CVE-2026-54515 affects multiple packages. jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor. See references for individual vulnerability details...
CLEANSTART-2026-HT58355 jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor
CVE-2026-54513 affects multiple packages. jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor. See references for individual vulnerability details...
CLEANSTART-2026-HP74376 jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor
CVE-2026-54512 affects multiple packages. jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor. See references for individual vulnerability details...
Security Bulletin:jackson-databind Deserialization Eager DNS Resolution Vulnerability
Summary jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor. Prior to versions 2.18.9, 2.21.5, 2.22.1, 3.1.5, and 3.2.1 on their respective release lines, the java.net.InetAddress branch of FromStringDeserializer.Std.deserialize calls...
Security Bulletin:Jackson-databind Vulnerability: Record Constructor Bypass via PropertyNamingStrategy
Summary jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor. From 2.15.0 until 2.18.8, 2.21.4, and 3.1.4, Java Records using a PropertyNamingStrategy can bypass @JsonIgnore because POJOPropertiesCollector.removeUnwantedIgnorals record...
CVE-2019-14439
CVE-2019-14439 Jackson-databind RCE...
Demo-Exploit-Jackson-RCE
Demo-Exploit-Jackson-RCE Based on the project jackson-rce-via-spel this project serves as an example web application to test multiple attack vectors file upload, forms on the Jackson-databind vulnerability. Introduction Based on an Angular7 frontend and a spring-boot backend different attack...
Security Bulletin:Polymorphic Type Validator Bypass in Jackson Databind 2.10.0 to 2.18.8, 2.21.4, and 3.1.4
Summary jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor. From 2.10.0 until 2.18.8, 2.21.4, and 3.1.4, jackson-databind's PolymorphicTypeValidator PTV is the primary safety mechanism guarding polymorphic deserialization. When...
jackson-CVE-2020-8840
CVE-2020-8840 FasterXML/jackson-databind Remote Code Execution Vulnerability...
ROOT-APP-MAVEN-CVE-2026-54512 CVE-2026-54512 in com.fasterxml.jackson.core:jackson-databind - Patched by Root
Root has patched CVE-2026-54512 in the com.fasterxml.jackson.core:jackson-databind package for Root:Maven. Multiple fixed versions available...
ROOT-APP-MAVEN-CVE-2026-54514 CVE-2026-54514 in com.fasterxml.jackson.core:jackson-databind - Patched by Root
Root has patched CVE-2026-54514 in the com.fasterxml.jackson.core:jackson-databind package for Root:Maven. Multiple fixed versions available...
ROOT-APP-MAVEN-CVE-2026-54515 CVE-2026-54515 in com.fasterxml.jackson.core:jackson-databind - Patched by Root
Root has patched CVE-2026-54515 in the com.fasterxml.jackson.core:jackson-databind package for Root:Maven. Multiple fixed versions available...
ROOT-APP-MAVEN-CVE-2026-68497 CVE-2026-68497 in com.fasterxml.jackson.core:jackson-databind - Patched by Root
Root has patched CVE-2026-68497 in the com.fasterxml.jackson.core:jackson-databind package for Root:Maven. Multiple fixed versions available...
Security Bulletin: InfoSphere Data Architect (IDA) 9.2.2 Vulnerability Fixes
Summary Security Bulletin: Multiple vulnerabilities getting fixed with InfoSphere Data Architect IDA 9.2.2. Hence, IBM strongly recommends upgrading to v9.2.2 Vulnerability Details CVEID:CVE-2026-68497 DESCRIPTION: jackson-databind binds a JSON string to a javax.xml.datatype.Duration or...