CVE-2026-77310 jackson-databind: Eager DNS resolution (SSRF) still present in InetAddress deserialization (Incomplete fix for CVE-2026-54514)

jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor. Prior to versions 2.18.9, 2.21.5, 2.22.1, 3.1.5, and 3.2.1 on their respective release lines, the java.net.InetAddress branch of FromStringDeserializer.Std.deserialize calls...

CVE-2026-77310

jackson-databind (FasterXML Jackson Data Processor) is affected by an incomplete fix for CVE-2026-54514. The java.net.InetAddress branch of FromStringDeserializer.Std._deserialize() calls InetAddress.getByName() on attacker-controlled input, causing eager DNS resolution during deserialization. Th...

CVE-2026-77310 jackson-databind: Eager DNS resolution (SSRF) still present in InetAddress deserialization (Incomplete fix for CVE-2026-54514)

jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor. Prior to versions 2.18.9, 2.21.5, 2.22.1, 3.1.5, and 3.2.1 on their respective release lines, the java.net.InetAddress branch of FromStringDeserializer.Std.deserialize calls...

ROOT-APP-MAVEN-CVE-2020-36187 CVE-2020-36187 in com.fasterxml.jackson.core:jackson-databind - Patched by Root

Root has patched CVE-2020-36187 in the com.fasterxml.jackson.core:jackson-databind package for Root:Maven. Multiple fixed versions available...

ROOT-APP-MAVEN-CVE-2019-16943 CVE-2019-16943 in com.fasterxml.jackson.core:jackson-databind - Patched by Root

Root has patched CVE-2019-16943 in the com.fasterxml.jackson.core:jackson-databind package for Root:Maven. Multiple fixed versions available...

ROOT-APP-MAVEN-CVE-2019-20330 CVE-2019-20330 in com.fasterxml.jackson.core:jackson-databind - Patched by Root

Root has patched CVE-2019-20330 in the com.fasterxml.jackson.core:jackson-databind package for Root:Maven. Multiple fixed versions available...

ROOT-APP-MAVEN-CVE-2020-36184 CVE-2020-36184 in com.fasterxml.jackson.core:jackson-databind - Patched by Root

Root has patched CVE-2020-36184 in the com.fasterxml.jackson.core:jackson-databind package for Root:Maven. Multiple fixed versions available...

ROOT-APP-MAVEN-CVE-2017-7525 CVE-2017-7525 in com.fasterxml.jackson.core:jackson-databind - Patched by Root

Root has patched CVE-2017-7525 in the com.fasterxml.jackson.core:jackson-databind package for Root:Maven. Multiple fixed versions available...

ROOT-APP-MAVEN-CVE-2020-35491 CVE-2020-35491 in com.fasterxml.jackson.core:jackson-databind - Patched by Root

Root has patched CVE-2020-35491 in the com.fasterxml.jackson.core:jackson-databind package for Root:Maven. Multiple fixed versions available...

ROOT-APP-MAVEN-CVE-2020-10650 CVE-2020-10650 in com.fasterxml.jackson.core:jackson-databind - Patched by Root

Root has patched CVE-2020-10650 in the com.fasterxml.jackson.core:jackson-databind package for Root:Maven. Multiple fixed versions available...

ROOT-APP-MAVEN-CVE-2019-14439 CVE-2019-14439 in com.fasterxml.jackson.core:jackson-databind - Patched by Root

Root has patched CVE-2019-14439 in the com.fasterxml.jackson.core:jackson-databind package for Root:Maven. Multiple fixed versions available...

ROOT-APP-MAVEN-CVE-2021-20190 CVE-2021-20190 in com.fasterxml.jackson.core:jackson-databind - Patched by Root

Root has patched CVE-2021-20190 in the com.fasterxml.jackson.core:jackson-databind package for Root:Maven. Multiple fixed versions available...

ROOT-APP-MAVEN-CVE-2019-12086 CVE-2019-12086 in com.fasterxml.jackson.core:jackson-databind - Patched by Root

Root has patched CVE-2019-12086 in the com.fasterxml.jackson.core:jackson-databind package for Root:Maven. Multiple fixed versions available...

ROOT-APP-MAVEN-CVE-2017-17485 CVE-2017-17485 in com.fasterxml.jackson.core:jackson-databind - Patched by Root

Root has patched CVE-2017-17485 in the com.fasterxml.jackson.core:jackson-databind package for Root:Maven. Multiple fixed versions available...

ROOT-APP-MAVEN-CVE-2020-36186 CVE-2020-36186 in com.fasterxml.jackson.core:jackson-databind - Patched by Root

Root has patched CVE-2020-36186 in the com.fasterxml.jackson.core:jackson-databind package for Root:Maven. Multiple fixed versions available...

ROOT-APP-MAVEN-CVE-2018-7489 CVE-2018-7489 in com.fasterxml.jackson.core:jackson-databind - Patched by Root

Root has patched CVE-2018-7489 in the com.fasterxml.jackson.core:jackson-databind package for Root:Maven. Multiple fixed versions available...

ROOT-APP-MAVEN-CVE-2020-36188 CVE-2020-36188 in com.fasterxml.jackson.core:jackson-databind - Patched by Root

Root has patched CVE-2020-36188 in the com.fasterxml.jackson.core:jackson-databind package for Root:Maven. Multiple fixed versions available...

ROOT-APP-MAVEN-CVE-2020-35490 CVE-2020-35490 in com.fasterxml.jackson.core:jackson-databind - Patched by Root

Root has patched CVE-2020-35490 in the com.fasterxml.jackson.core:jackson-databind package for Root:Maven. Multiple fixed versions available...

ROOT-APP-MAVEN-CVE-2020-35728 CVE-2020-35728 in com.fasterxml.jackson.core:jackson-databind - Patched by Root

Root has patched CVE-2020-35728 in the com.fasterxml.jackson.core:jackson-databind package for Root:Maven. Multiple fixed versions available...

ROOT-APP-MAVEN-CVE-2018-5968 CVE-2018-5968 in com.fasterxml.jackson.core:jackson-databind - Patched by Root

Root has patched CVE-2018-5968 in the com.fasterxml.jackson.core:jackson-databind package for Root:Maven. Multiple fixed versions available...