CVE-2026-95155

FasterXML Jackson 1.x, confirmed in jackson-mapper-asl versions 1.8.3, 1.9.2, 1.9.11, 1.9.12, and 1.9.13, allows attackers to cause a denial of service by supplying deeply nested JSON input to an application that deserializes untrusted JSON using ObjectMapper.readValue...

CVE-2026-95155

The FasterXML Jackson 1.x library is vulnerable to a Denial of Service (DoS) attack, specifically confirmed in jackson-mapper-asl versions 1.8.3, 1.9.2, 1.9.11, 1.9.12, and 1.9.13 . The root cause is uncontrolled recursion (CWE-674), where an attacker can supply deeply nested JSON input to an app...

CVE-2026-95155

FasterXML Jackson 1.x, confirmed in jackson-mapper-asl versions 1.8.3, 1.9.2, 1.9.11, 1.9.12, and 1.9.13, allows attackers to cause a denial of service by supplying deeply nested JSON input to an application that deserializes untrusted JSON using ObjectMapper.readValue...

EUVD-2026-102127

FasterXML Jackson 1.x, confirmed in jackson-mapper-asl versions 1.8.3, 1.9.2, 1.9.11, 1.9.12, and 1.9.13, allows attackers to cause a denial of service by supplying deeply nested JSON input to an application that deserializes untrusted JSON using ObjectMapper.readValue...

Astra Linux – Vulnerability in libjackson-json-java

A flaw was discovered in the org.codehaus.jackson:jackson-mapper-asl:1.9.x libraries. XML external entity vulnerabilities, similar to CVE-2016-3720, also affect the codehaus jackson-mapper-asl libraries, but in different classes...

ae.teletronics.nlp:entityextraction (1.3), ae.teletronics.nlp:w2vec (1.0) +18630 more potentially affected by CVE-2026-91776 via org.codehaus.jackson:jackson-mapper-asl (>=0.9.8, <=1.9.13)

org.codehaus.jackson:jackson-mapper-asl MAVEN version =0.9.8, =0.25-rc1, =0.25-rc1, =0.25, =0.25, =0.25, =0.25, =1.0.1, =1.0.6, =1.0.6, =1.1, =1.1.1, =1.2, =1.2, =1.2.10 and more Source cves: CVE-2026-91776 Source advisory: SNYK:JAVA-ORGCODEHAUSJACKSON-20059687...

Allocation of Resources Without Limits or Throttling

Overview org.codehaus.jackson:jackson-mapper-asl is a high-performance data binding package built on Jackson JSON processor. Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling in the findDeserializer method of TypeDeserializerBase, which cache...

Security Bulletin: IBM InfoSphere Information Server is affected by multiple vulnerabilities in Codehaus Jackson mapper

Summary Multiple vulnerabilities in Codehaus Jackson mapper that is used by InfoSphere Information Server were addressed. Vulnerability Details CVEID:CVE-2019-10172 DESCRIPTION: A flaw was found in org.codehaus.jackson:jackson-mapper-asl:1.9.x libraries. XML external entity vulnerabilities simila...

ROOT-APP-MAVEN-CVE-2019-10202 CVE-2019-10202 in io.root.org.codehaus.jackson:jackson-mapper-asl - Patched by Root

Root has patched CVE-2019-10202 in the io.root.org.codehaus.jackson:jackson-mapper-asl package for Root:Maven. Multiple fixed versions available...

ROOT-APP-MAVEN-CVE-2019-10172 CVE-2019-10172 in io.root.org.codehaus.jackson:jackson-mapper-asl - Patched by Root

Root has patched CVE-2019-10172 in the io.root.org.codehaus.jackson:jackson-mapper-asl package for Root:Maven. Multiple fixed versions available...

Unity Linux 20.1050e / 20.1060e / 20.1070-8ae / 20.1070e Security Update: jackson (UTSA-2026-016674)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-016674 advisory. A flaw was found in org.codehaus.jackson:jackson-mapper-asl:1.9.x libraries. XML external entity vulnerabilities similar CVE-2016-3720 also affects codehaus...

EUVD-2020-0314

Malware in sbrugna...

Atlassian Confluence 8.5.x < 8.5.21 / 8.6.x < 9.2.3 / 9.3.x < 9.4.0 (CONFSERVER-99547)

The version of Atlassian Confluence Server running on the remote host is affected by a vulnerability as referenced in the CONFSERVER-99547 advisory. - A flaw was found in org.codehaus.jackson:jackson-mapper-asl:1.9.x libraries. XML external entity vulnerabilities similar CVE-2016-3720 also affect...

Security Bulletin: Vulnerabilities found in jackson-mapper-asl which is shipped with IBM® Intelligent Operations Center(CVE-2019-10172, CVE-2019-10202)

Summary Multiple vulnerabilities have been identified in jackson-mapper-asl which is shipped with IBM® Intelligent Operations Center. Information about these vulnerabilities affecting IBM® Intelligent Operations Center have been published and addressed the applicable CVEs. Vulnerability Details...

Security Bulletin: Vulnerabilities found in jackson-mapper-asl-1.9.13.jar which is shipped with IBM® Intelligent Operations Center(CVE-2019-10202, CVE-2019-10172)

Summary Multiple vulnerabilities have been identified in jackson-mapper-asl-1.9.13.jar which is shipped with IBM® Intelligent Operations Center. Information about these vulnerabilities affecting IBM® Intelligent Operations Center have been published and addressed the applicable CVEs. Vulnerabilit...

Security Bulletin: IBM Match 360 is vulnerable to CVE-2019-10202 and CVE-2019-10172 for jackson-mapper-asl

Summary Match 360 is vulnerable to the following CVEs: CVE-CVE-2019-10202 and CVE-2019-10172 Vulnerability Details CVEID:CVE-2019-10202 DESCRIPTION: Red Hat JBoss Enterprise Application Platform EAP could allow a remote attacker to execute arbitrary code on the system, caused by improper...

Security Bulletin: Multiple Vulnerabilities of Jackson-Mapper-asl have affected APM Linux KVM Agent

Summary APM Linux KVM Agent is vulnerable to Jackson-mapper-asl vulnerabilities described in CVE-2019-10202 and CVE-2019-10172. The fix includes jackson-mapper-asl-1.9.13.jar upgraded to jackson-databind-2.14.0.jar Vulnerability Details CVEID:CVE-2019-10202 DESCRIPTION: Red Hat JBoss Enterprise...

Security Bulletin: Multiple vulnerabilities in Spark affecting IBM QRadar User Behavior Analytics

Summary Multiple vulnerabilities exist in Spark, which is used by IBM QRadar User Behavior Analytics UBA. These vulnerabilities are addressed in UBA by upgrading to a version of Spark and packages that are associated with Spark that resolve the vulnerabilities. Vulnerability Details...

org.codehaus.jackson:jackson-jaxrs (0.9.9-5) potentially affected by CVE-2019-10202 via org.codehaus.jackson:jackson-mapper-asl (0.9.9-5)

org.codehaus.jackson:jackson-mapper-asl MAVEN version 0.9.9-5 is affected by a known vulnerability. The following packages have a transitive dependency on org.codehaus.jackson:jackson-mapper-asl and may be impacted: - org.codehaus.jackson:jackson-jaxrs 0.9.9-5 Source cves: CVE-2019-10202 Source...

org.codehaus.fabric3:fabric3-databinding-json (>=1.1, <=1.5), org.codehaus.fabric3:profile-net (>=1.1, <=1.5) +1 more potentially affected by CVE-2019-10202 via org.codehaus.jackson:jackson-mapper-asl (0.9.9-4)

org.codehaus.jackson:jackson-mapper-asl MAVEN version 0.9.9-4 is affected by a known vulnerability. The following packages have a transitive dependency on org.codehaus.jackson:jackson-mapper-asl and may be impacted: - org.codehaus.fabric3:fabric3-databinding-json =1.1, =1.1, =1.5 -...