com.fasterxml.jackson.core:jackson-databind
General data-binding functionality for Jackson: works on core streaming API
Security Advisories for com.fasterxml.jackson.core:jackson-databind in maven
Moderate
20 days ago
jackson-databind: @JsonView bypassed for @JsonUnwrapped container properties on deserialization
maven
tools.jackson.core:jackson-databind, com.fasterxml.jackson.core:jackson-databind
Moderate
20 days ago
jackson-databind: `@JsonView` bypass for creator properties with `@JsonTypeInfo(include=As.EXTERNAL_PROPERTY)`
maven
com.fasterxml.jackson.core:jackson-databind
Moderate
20 days ago
jackson-databind: @JsonIgnore on a Record property is bypassed with a PropertyNamingStrategy
maven
tools.jackson.core:jackson-databind, com.fasterxml.jackson.core:jackson-databind
Moderate
about 2 months ago
jackson-databind has @JsonView bypass for setterless creator properties
maven
tools.jackson.core:jackson-databind, com.fasterxml.jackson.core:jackson-databind
Moderate
about 2 months ago
jackson-databind's renamed @JsonIgnore'd setters can deserialize via private fields
maven
tools.jackson.core:jackson-databind, com.fasterxml.jackson.core:jackson-databind
Moderate
about 2 months ago
jackson-databind: InetSocketAddress deserialization triggers eager DNS resolution (SSRF)
maven
tools.jackson.core:jackson-databind, com.fasterxml.jackson.core:jackson-databind
High
about 2 months ago
jackson-databind has an array subtype allowlist bypass in BasicPolymorphicTypeValidator (allowIfSubTypeIsArray)
maven
tools.jackson.core:jackson-databind, com.fasterxml.jackson.core:jackson-databind
High
about 2 months ago
jackson-databind has a PolymorphicTypeValidator bypass via generic type parameters that allows arbitrary class instantiation
maven
tools.jackson.core:jackson-databind, com.fasterxml.jackson.core:jackson-databind
Moderate
about 2 months ago
jackson-databind: Deeply nested JsonNode throws StackOverflowError for toString()
maven
com.fasterxml.jackson.core:jackson-databind
Moderate
about 2 months ago
jackson-databind has a @JsonView bypass for unwrapped creator parameters
maven
tools.jackson.core:jackson-databind, com.fasterxml.jackson.core:jackson-databind
High
over 3 years ago
jackson-databind possible Denial of Service if using JDK serialization to serialize JsonNode
maven
com.fasterxml.jackson.core:jackson-databind
High
almost 4 years ago
Uncontrolled Resource Consumption in FasterXML jackson-databind
maven
com.fasterxml.jackson.core:jackson-databind
High
almost 4 years ago
Uncontrolled Resource Consumption in Jackson-databind
maven
com.fasterxml.jackson.core:jackson-databind
High
about 4 years ago
jackson-databind vulnerable to unsafe deserialization
maven
com.fasterxml.jackson.core:jackson-databind
Potential
High
about 4 years ago
Deserialization of Untrusted Data in Spring Security
maven
org.springframework.security:spring-security-core
High
over 4 years ago
Deeply nested json in jackson-databind
maven
com.fasterxml.jackson.core:jackson-databind
High
over 4 years ago
Unsafe Deserialization in jackson-databind
maven
com.fasterxml.jackson.core:jackson-databind
High
over 4 years ago
Unsafe Deserialization in jackson-databind
maven
com.fasterxml.jackson.core:jackson-databind
High
over 4 years ago
Unsafe Deserialization in jackson-databind
maven
com.fasterxml.jackson.core:jackson-databind
High
over 4 years ago
Unsafe Deserialization in jackson-databind
maven
com.fasterxml.jackson.core:jackson-databind
High
over 4 years ago
Unsafe Deserialization in jackson-databind
maven
com.fasterxml.jackson.core:jackson-databind
High
over 4 years ago
Unsafe Deserialization in jackson-databind
maven
com.fasterxml.jackson.core:jackson-databind
High
over 4 years ago
Unsafe Deserialization in jackson-databind
maven
com.fasterxml.jackson.core:jackson-databind
High
over 4 years ago
Unsafe Deserialization in jackson-databind
maven
com.fasterxml.jackson.core:jackson-databind
High
over 4 years ago
Unsafe Deserialization in jackson-databind
maven
com.fasterxml.jackson.core:jackson-databind
High
over 4 years ago
Unsafe Deserialization in jackson-databind
maven
com.fasterxml.jackson.core:jackson-databind
High
over 4 years ago
Unsafe Deserialization in jackson-databind
maven
com.fasterxml.jackson.core:jackson-databind
High
over 4 years ago
Serialization gadget exploit in jackson-databind
maven
com.fasterxml.jackson.core:jackson-databind
High
over 4 years ago
Serialization gadgets exploit in jackson-databind
maven
com.fasterxml.jackson.core:jackson-databind
High
over 4 years ago
Serialization gadgets exploit in jackson-databind
maven
com.fasterxml.jackson.core:jackson-databind
High
over 4 years ago
Code Injection in jackson-databind
maven
com.fasterxml.jackson.core:jackson-databind
High
over 4 years ago
Unsafe Deserialization in jackson-databind
maven
com.fasterxml.jackson.core:jackson-databind
High
over 5 years ago
XML External Entity (XXE) Injection in Jackson Databind
maven
com.fasterxml.jackson.core:jackson-databind
High
over 5 years ago
Deserialization of untrusted data in jackson-databind
maven
com.fasterxml.jackson.core:jackson-databind
High
about 6 years ago
Deserialization of Untrusted Data in jackson-databind
maven
com.fasterxml.jackson.core:jackson-databind
High
about 6 years ago
Deserialization of untrusted data in Jackson Databind
maven
com.fasterxml.jackson.core:jackson-databind
High
about 6 years ago
Deserialization of untrusted data in Jackson Databind
maven
com.fasterxml.jackson.core:jackson-databind
High
about 6 years ago
Deserialization of untrusted data in Jackson Databind
maven
com.fasterxml.jackson.core:jackson-databind
High
about 6 years ago
Deserialization of untrusted data in Jackson Databind
maven
com.fasterxml.jackson.core:jackson-databind
High
about 6 years ago
Deserialization of Untrusted Data
maven
com.fasterxml.jackson.core:jackson-databind
Critical
about 6 years ago
Improper Input Validation in jackson-databind
maven
com.fasterxml.jackson.core:jackson-databind
High
about 6 years ago
jackson-databind mishandles the interaction between serialization gadgets and typing
maven
com.fasterxml.jackson.core:jackson-databind
Critical
about 6 years ago
jackson-databind mishandles the interaction between serialization gadgets and typing
maven
com.fasterxml.jackson.core:jackson-databind
High
about 6 years ago
Polymorphic deserialization of malicious object in jackson-databind
maven
com.fasterxml.jackson.core:jackson-databind
High
about 6 years ago
jackson-databind mishandles the interaction between serialization gadgets and typing
maven
com.fasterxml.jackson.core:jackson-databind
Critical
about 6 years ago
jackson-databind mishandles the interaction between serialization gadgets and typing
maven
com.fasterxml.jackson.core:jackson-databind
High
about 6 years ago
Polymorphic deserialization of malicious object in jackson-databind
maven
com.fasterxml.jackson.core:jackson-databind
High
about 6 years ago
jackson-databind mishandles the interaction between serialization gadgets and typing
maven
com.fasterxml.jackson.core:jackson-databind
High
about 6 years ago
jackson-databind mishandles the interaction between serialization gadgets and typing
maven
com.fasterxml.jackson.core:jackson-databind
High
about 6 years ago
jackson-databind mishandles the interaction between serialization gadgets and typing
maven
com.fasterxml.jackson.core:jackson-databind
High
about 6 years ago
jackson-databind mishandles the interaction between serialization gadgets and typing
maven
com.fasterxml.jackson.core:jackson-databind
High
over 6 years ago
jackson-databind mishandles the interaction between serialization gadgets and typing
maven
com.fasterxml.jackson.core:jackson-databind
Critical
over 6 years ago
jackson-databind mishandles the interaction between serialization gadgets and typing
maven
com.fasterxml.jackson.core:jackson-databind
High
over 6 years ago
jackson-databind mishandles the interaction between serialization gadgets and typing
maven
com.fasterxml.jackson.core:jackson-databind
High
over 6 years ago
jackson-databind mishandles the interaction between serialization gadgets and typing
maven
com.fasterxml.jackson.core:jackson-databind
Critical
over 6 years ago
Deserialization of Untrusted Data in jackson-databind
maven
com.fasterxml.jackson.core:jackson-databind
Critical
over 6 years ago
Deserialization of Untrusted Data in jackson-databind
maven
com.fasterxml.jackson.core:jackson-databind
Critical
over 6 years ago
jackson-databind polymorphic typing issue
maven
com.fasterxml.jackson.core:jackson-databind
Critical
over 6 years ago
jackson-databind polymorphic typing issue
maven
com.fasterxml.jackson.core:jackson-databind
Critical
almost 7 years ago
Polymorphic Typing in FasterXML jackson-databind
maven
com.fasterxml.jackson.core:jackson-databind
Critical
almost 7 years ago
Polymorphic Typing issue in FasterXML jackson-databind
maven
com.fasterxml.jackson.core:jackson-databind
Critical
almost 7 years ago
Polymorphic Typing issue in FasterXML jackson-databind
maven
com.fasterxml.jackson.core:jackson-databind
High
about 7 years ago
Deserialization of untrusted data in FasterXML jackson-databind
maven
com.fasterxml.jackson.core:jackson-databind
Critical
about 7 years ago
Deserialization of untrusted data in FasterXML jackson-databind
maven
com.fasterxml.jackson.core:jackson-databind
Moderate
about 7 years ago
Deserialization of untrusted data in FasterXML jackson-databind
maven
com.fasterxml.jackson.core:jackson-databind
Critical
about 7 years ago
Deserialization of Untrusted Data in jackson-databind
maven
com.fasterxml.jackson.core:jackson-databind
Moderate
about 7 years ago
Deserialization of Untrusted Data in FasterXML jackson-databind
maven
com.fasterxml.jackson.core:jackson-databind
High
about 7 years ago
Information exposure in FasterXML jackson-databind
maven
com.fasterxml.jackson.core:jackson-databind
High
over 7 years ago
jackson-databind Deserialization of Untrusted Data vulnerability
maven
com.fasterxml.jackson.core:jackson-databind
Critical
over 7 years ago
Arbitrary Code Execution in jackson-databind
maven
com.fasterxml.jackson.core:jackson-databind
Critical
over 7 years ago
XML External Entity Reference (XXE) in jackson-databind
maven
com.fasterxml.jackson.core:jackson-databind
Critical
over 7 years ago
Server-Side Request Forgery (SSRF) in jackson-databind
maven
com.fasterxml.jackson.core:jackson-databind
Critical
over 7 years ago
com.fasterxml.jackson.core:jackson-databind vulnerable to Deserialization of Untrusted Data
maven
com.fasterxml.jackson.core:jackson-databind
Critical
over 7 years ago
Deserialization of Untrusted Data in jackson-databind
maven
com.fasterxml.jackson.core:jackson-databind
Critical
over 7 years ago
Deserialization of Untrusted Data in jackson-databind due to polymorphic deserialization
maven
com.fasterxml.jackson.core:jackson-databind
Critical
over 7 years ago
Arbitrary Code Execution in jackson-databind
maven
com.fasterxml.jackson.core:jackson-databind
Critical
almost 8 years ago
jackson-databind vulnerable to remote code execution due to incorrect deserialization and blocklist bypass
maven
com.fasterxml.jackson.core:jackson-databind
Critical
almost 8 years ago
jackson-databind vulnerable to deserialization flaw leading to unauthenticated remote code execution
maven
com.fasterxml.jackson.core:jackson-databind
Critical
almost 8 years ago
FasterXML jackson-databind allows unauthenticated remote code execution
maven
com.fasterxml.jackson.core:jackson-databind
Critical
almost 8 years ago
jackson-databind is vulnerable to a deserialization flaw
maven
com.fasterxml.jackson.core:jackson-databind