CVE-2026-54514
jackson-databind: InetSocketAddress deserialization triggers eager DNS resolution (SSRF)
jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor. From 2.0.0 until 2.18.8, 2.21.4, and 3.1.4, JDKFromStringDeserializer constructed InetSocketAddress with new InetSocketAddress(host, port), which performs eager DNS name resolution for hostname inputs at deserialization time. An application that binds untrusted JSON into a type containing an InetSocketAddress field issues an attacker-chosen DNS query during readValue, before any application-level validation or connect logic. The fix uses InetSocketAddress.createUnresolved(host, port), deferring DNS to an explicit connect. This vulnerability is fixed in 2.18.8, 2.21.4, and 3.1.4.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- Low
- Integrity
- None
- Availability
- None
Exploit likelihood
What each source reports
CVE List Score used
jackson-databind: InetSocketAddress deserialization triggers eager DNS resolution (SSRF)
jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor. From 2.0.0 until 2.18.8, 2.21.4, and 3.1.4, JDKFromStringDeserializer constructed InetSocketAddress with new InetSocketAddress(host, port), which performs eager DNS name resolution for hostname inputs at deserialization time. An application that binds untrusted JSON into a type containing an InetSocketAddress field issues an attacker-chosen DNS query during readValue, before any application-level validation or connect logic. The fix uses InetSocketAddress.createUnresolved(host, port), deferring DNS to an explicit connect. This vulnerability is fixed in 2.18.8, 2.21.4, and 3.1.4.
- Record
CVE-2026-54514- CVSS 3.1
- 5.3 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N - Weakness
- CWE-918
- Updated
- 2026-11-02
EUVDEUVD-2026-38592
jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor. From 2.0.0 until 2.18.8, 2.21.4, and 3.1.4, JDKFromStringDeserializer constructed InetSocketAddress with new InetSocketAddress(host, port), which performs eager DNS name resolution for hostname inputs at deserialization time. An application that binds untrusted JSON into a type containing an InetSocketAddress field issues an attacker-chosen DNS query during readValue, before any application-level validation or connect logic. The fix uses InetSocketAddress.createUnresolved(host, port), deferring DNS to an explicit connect. This vulnerability is fixed in 2.18.8, 2.21.4, and 3.1.4.
- Record
EUVD-2026-38592- CVSS 3.1
- 5.3 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-hgj6-7826-r7m5
jackson-databind: InetSocketAddress deserialization triggers eager DNS resolution (SSRF)
Summary
JDKFromStringDeserializer constructed InetSocketAddress with new InetSocketAddress(host, port), which performs eager DNS name resolution for hostname inputs at deserialization time. An application that binds untrusted JSON into a type containing an InetSocketAddress field issues an attacker-chosen DNS query during readValue, before any application-level validation or connect logic. The fix uses InetSocketAddress.createUnresolved(host, port), deferring DNS to an explicit connect.
Impact
An attacker controlling JSON deserialized into an InetSocketAddress-bearing type can force outbound DNS lookups for attacker-chosen hostnames at deserialization time (SSRF / DNS-based out-of-band interaction / internal-resolver probing), purely from binding.
Affected / Patched (verified via git tag --contains on 1f5a103)
- 2.18 line:
>= 2.18.0, < 2.18.8-> fixed in 2.18.8 - 2.19-2.21 line:
>= 2.19.0, < 2.21.4-> fixed in 2.21.4 - 3.x line:
>= 3.0.0, < 3.1.4-> fixed in 3.1.4
Severity / CWE
Maintainer: minor. Reporter: LOW. CWE-918 (SSRF).
Upstream fix
FasterXML/jackson-databind#5951 ("Improve InetSocketAddress deserialization"). Released 2026-06-04 in 2.18.8 / 2.21.4 / 3.1.4.
Credits
Omkhar Arasaratnam (@omkhar) - finder.
- Record
GHSA-hgj6-7826-r7m5- CVSS 3.1
- 5.3 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N - Weakness
- CWE-918
- Updated
- 2026-11-02
NVD
jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor. From 2.0.0 until 2.18.8, 2.21.4, and 3.1.4, JDKFromStringDeserializer constructed InetSocketAddress with new InetSocketAddress(host, port), which performs eager DNS name resolution for hostname inputs at deserialization time. An application that binds untrusted JSON into a type containing an InetSocketAddress field issues an attacker-chosen DNS query during readValue, before any application-level validation or connect logic. The fix uses InetSocketAddress.createUnresolved(host, port), deferring DNS to an explicit connect. This vulnerability is fixed in 2.18.8, 2.21.4, and 3.1.4.
- Record
CVE-2026-54514- CVSS 3.1
- 5.3 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N - Weakness
- CWE-918
- Updated
- 2026-11-02
OSV
jackson-databind: InetSocketAddress deserialization triggers eager DNS resolution (SSRF)
jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor. From 2.0.0 until 2.18.8, 2.21.4, and 3.1.4, JDKFromStringDeserializer constructed InetSocketAddress with new InetSocketAddress(host, port), which performs eager DNS name resolution for hostname inputs at deserialization time. An application that binds untrusted JSON into a type containing an InetSocketAddress field issues an attacker-chosen DNS query during readValue, before any application-level validation or connect logic. The fix uses InetSocketAddress.createUnresolved(host, port), deferring DNS to an explicit connect. This vulnerability is fixed in 2.18.8, 2.21.4, and 3.1.4.
- Record
CVE-2026-54514- CVSS 3.1
- 5.3 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N - Weakness
- CWE-918
- Updated
- 2026-11-02
OSVDEBIAN-CVE-2026-54514
jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor. From 2.0.0 until 2.18.8, 2.21.4, and 3.1.4, JDKFromStringDeserializer constructed InetSocketAddress with new InetSocketAddress(host, port), which performs eager DNS name resolution for hostname inputs at deserialization time. An application that binds untrusted JSON into a type containing an InetSocketAddress field issues an attacker-chosen DNS query during readValue, before any application-level validation or connect logic. The fix uses InetSocketAddress.createUnresolved(host, port), deferring DNS to an explicit connect. This vulnerability is fixed in 2.18.8, 2.21.4, and 3.1.4.
- Record
DEBIAN-CVE-2026-54514- CVSS 3.1
- 5.3 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N - Updated
- 2026-11-02
Show 48 moreShow less
OSVGHSA-hgj6-7826-r7m5
jackson-databind: InetSocketAddress deserialization triggers eager DNS resolution (SSRF)
Summary
JDKFromStringDeserializer constructed InetSocketAddress with new InetSocketAddress(host, port), which performs eager DNS name resolution for hostname inputs at deserialization time. An application that binds untrusted JSON into a type containing an InetSocketAddress field issues an attacker-chosen DNS query during readValue, before any application-level validation or connect logic. The fix uses InetSocketAddress.createUnresolved(host, port), deferring DNS to an explicit connect.
Impact
An attacker controlling JSON deserialized into an InetSocketAddress-bearing type can force outbound DNS lookups for attacker-chosen hostnames at deserialization time (SSRF / DNS-based out-of-band interaction / internal-resolver probing), purely from binding.
Affected / Patched (verified via git tag --contains on 1f5a103)
- 2.18 line:
>= 2.18.0, < 2.18.8-> fixed in 2.18.8 - 2.19-2.21 line:
>= 2.19.0, < 2.21.4-> fixed in 2.21.4 - 3.x line:
>= 3.0.0, < 3.1.4-> fixed in 3.1.4
Severity / CWE
Maintainer: minor. Reporter: LOW. CWE-918 (SSRF).
Upstream fix
FasterXML/jackson-databind#5951 ("Improve InetSocketAddress deserialization"). Released 2026-06-04 in 2.18.8 / 2.21.4 / 3.1.4.
Credits
Omkhar Arasaratnam (@omkhar) - finder.
- Record
GHSA-hgj6-7826-r7m5- CVSS 3.1
- 5.3 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N - Weakness
- CWE-918
- Updated
- 2026-11-02
OSVRHLW-2026-09128b29f89dc8ed
Lightwell Security Advisory: jackson-databind 2.17.3.rhlw-00013
Red Hat Lightwell has released com.fasterxml.jackson.core:jackson-databind 2.17.3.rhlw-00013 with backported fixes for CVE-2026-83557, CVE-2026-54512, CVE-2026-54515, CVE-2026-19032, CVE-2026-77310, CVE-2026-54514, CVE-2026-59888, and CVE-2026-54513.
CVE-2026-83557: jackson-databind omits java.lang.Comparable from DefaultBaseTypeLimitingValidator's unsafe base types
CVE-2026-54512: jackson-databind: PolymorphicTypeValidator bypass via generic type parameters allows arbitrary class instantiation
CVE-2026-54515: jackson-databind: Case-insensitive deserialization bypasses per-property @JsonIgnoreProperties
CVE-2026-19032: jackson-databind resolves attacker-controlled URI schemes when deserializing java.nio.file.Path
CVE-2026-77310: jackson-databind: Eager DNS resolution (SSRF) still present in InetAddress deserialization (Incomplete fix for CVE-2026-54514)
CVE-2026-54514: jackson-databind: InetSocketAddress deserialization triggers eager DNS resolution (SSRF)
CVE-2026-59888: jackson-databind: @JsonIgnore on a Record property is bypassed with a PropertyNamingStrategy
CVE-2026-54513: jackson-databind: Array subtype allowlist bypass in BasicPolymorphicTypeValidator (allowIfSubTypeIsArray)
This patched artifact is a drop-in replacement for com.fasterxml.jackson.core:jackson-databind 2.17.3 from Maven Central.
- Record
RHLW-2026-09128b29f89dc8ed- CVSS 3.1
- 5.6 Medium
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L - Updated
- 2026-11-02
OSVRHLW-2026-804d65df1a73952a
Lightwell Security Advisory: jackson-databind 2.18.0.rhlw-00010
Red Hat Lightwell has released com.fasterxml.jackson.core:jackson-databind 2.18.0.rhlw-00010 with backported fixes for CVE-2026-19032, CVE-2026-54513, CVE-2026-54514, CVE-2026-54515, CVE-2026-59888, CVE-2026-59889, and CVE-2026-83557.
CVE-2026-19032: jackson-databind resolves attacker-controlled URI schemes when deserializing java.nio.file.Path
CVE-2026-54513: jackson-databind: Array subtype allowlist bypass in BasicPolymorphicTypeValidator (allowIfSubTypeIsArray)
CVE-2026-54514: jackson-databind: InetSocketAddress deserialization triggers eager DNS resolution (SSRF)
CVE-2026-54515: jackson-databind: Case-insensitive deserialization bypasses per-property @JsonIgnoreProperties
CVE-2026-59888: jackson-databind: @JsonIgnore on a Record property is bypassed with a PropertyNamingStrategy
CVE-2026-59889: jackson-databind: @JsonView ypassed for @JsonUnwrapped container properties on deserialization
CVE-2026-83557: jackson-databind omits java.lang.Comparable from DefaultBaseTypeLimitingValidator's unsafe base types
This patched artifact is a drop-in replacement for com.fasterxml.jackson.core:jackson-databind 2.18.0 from Maven Central.
- Record
RHLW-2026-804d65df1a73952a- CVSS 3.1
- 5.3 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L - Updated
- 2026-11-02
OSVRHLW-2026-bad5ca0773255e9e
Lightwell Security Advisory: jackson-databind 2.13.4.1-rhlw-00013
Red Hat Lightwell has released com.fasterxml.jackson.core:jackson-databind 2.13.4.1-rhlw-00013 with backported fixes for CVE-2026-50193, CVE-2026-54512, CVE-2026-54513, and CVE-2026-54514.
CVE-2026-50193: jackson-databind: Deeply nested JsonNode throws StackOverflowError for toString()
CVE-2026-54512: jackson-databind: PolymorphicTypeValidator bypass via generic type parameters allows arbitrary class instantiation
CVE-2026-54513: jackson-databind: Array subtype allowlist bypass in BasicPolymorphicTypeValidator (allowIfSubTypeIsArray)
CVE-2026-54514: jackson-databind: InetSocketAddress deserialization triggers eager DNS resolution (SSRF)
This patched artifact is a drop-in replacement for com.fasterxml.jackson.core:jackson-databind 2.13.4.1 from Maven Central.
- Record
RHLW-2026-bad5ca0773255e9e- CVSS 4.0
- 6.3 Medium
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N - CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVRHLW-2026-f50c19633c98b180
Lightwell Security Advisory: jackson-databind 2.13.4.rhlw-00027
Red Hat Lightwell has released com.fasterxml.jackson.core:jackson-databind 2.13.4.rhlw-00027 with a backported security fix.
CVE-2026-54514: jackson-databind: InetSocketAddress deserialization triggers eager DNS resolution (SSRF)
This patched artifact is a drop-in replacement for com.fasterxml.jackson.core:jackson-databind 2.13.4 from Maven Central.
- Record
RHLW-2026-f50c19633c98b180- CVSS 3.1
- 5.3 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N - Updated
- 2026-11-02
OSVUBUNTU-CVE-2026-54514
jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor. From 2.0.0 until 2.18.8, 2.21.4, and 3.1.4, JDKFromStringDeserializer constructed InetSocketAddress with new InetSocketAddress(host, port), which performs eager DNS name resolution for hostname inputs at deserialization time. An application that binds untrusted JSON into a type containing an InetSocketAddress field issues an attacker-chosen DNS query during readValue, before any application-level validation or connect logic. The fix uses InetSocketAddress.createUnresolved(host, port), deferring DNS to an explicit connect. This vulnerability is fixed in 2.18.8, 2.21.4, and 3.1.4.
- Record
UBUNTU-CVE-2026-54514- CVSS 3.1
- 5.3 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N - Updated
- 2026-11-02
OSVCLSA-2026-1784135237 No score
jackson-databind: Fix of CVE-2026-54514
- CVE-2026-54514: fix InetSocketAddress deserialization to prevent DNS lookup
- Record
CLSA-2026-1784135237- Updated
- 2026-11-02
OSVCLSA-2026-1788348298 No score
TuxCare security update for com.fasterxml.jackson.core:jackson-databind (3 CVEs)
TuxCare rebuilt com.fasterxml.jackson.core:jackson-databind to address 3 CVEs. Fixed in 2.14.2-tuxcare.2.
- Record
CLSA-2026-1788348298- Updated
- 2026-11-02
OSVCLSA-2026-1788358728 No score
TuxCare security update for com.fasterxml.jackson.core:jackson-databind (5 CVEs)
TuxCare rebuilt com.fasterxml.jackson.core:jackson-databind to address 5 CVEs. Fixed in 2.14.1-tuxcare.1.
- Record
CLSA-2026-1788358728- Updated
- 2026-11-02
OSVCLSA-2026-1789494210 No score
TuxCare security update for com.fasterxml.jackson.core:jackson-databind (9 CVEs)
TuxCare rebuilt com.fasterxml.jackson.core:jackson-databind to address 9 CVEs. Fixed in 2.17.2-tuxcare.1.
- Record
CLSA-2026-1789494210- Updated
- 2026-11-02
OSVCLSA-2026-1791487635 No score
TuxCare security update for com.fasterxml.jackson.core:jackson-databind (9 CVEs)
TuxCare rebuilt com.fasterxml.jackson.core:jackson-databind to address 9 CVEs. Fixed in 2.17.3-tuxcare.3.
- Record
CLSA-2026-1791487635- Updated
- 2026-11-02
OSVCLSA-2026-1791530917 No score
TuxCare security update for com.fasterxml.jackson.core:jackson-databind (8 CVEs)
TuxCare rebuilt com.fasterxml.jackson.core:jackson-databind to address 8 CVEs. Fixed in 2.8.11-tuxcare.1.
- Record
CLSA-2026-1791530917- Updated
- 2026-11-02
OSVCLSA-2026-1791531399 No score
TuxCare security update for com.fasterxml.jackson.core:jackson-databind (9 CVEs)
TuxCare rebuilt com.fasterxml.jackson.core:jackson-databind to address 9 CVEs. Fixed in 2.11.1-tuxcare.1.
- Record
CLSA-2026-1791531399- Updated
- 2026-11-02
OSVCLSA-2026-1791531441 No score
TuxCare security update for com.fasterxml.jackson.core:jackson-databind (9 CVEs)
TuxCare rebuilt com.fasterxml.jackson.core:jackson-databind to address 9 CVEs. Fixed in 2.11.3-tuxcare.1.
- Record
CLSA-2026-1791531441- Updated
- 2026-11-02
OSVCLSA-2026-1791531494 No score
TuxCare security update for com.fasterxml.jackson.core:jackson-databind (10 CVEs)
TuxCare rebuilt com.fasterxml.jackson.core:jackson-databind to address 10 CVEs. Fixed in 2.9.10.3-tuxcare.1.
- Record
CLSA-2026-1791531494- Updated
- 2026-11-02
OSVCLSA-2026-1791545828 No score
TuxCare security update for com.fasterxml.jackson.core:jackson-databind (6 CVEs)
TuxCare rebuilt com.fasterxml.jackson.core:jackson-databind to address 6 CVEs. Fixed in 2.17.1-tuxcare.1.
- Record
CLSA-2026-1791545828- Updated
- 2026-11-02
OSVCLSA-2026-1791781917 No score
TuxCare security update for com.fasterxml.jackson.core:jackson-databind (9 CVEs)
TuxCare rebuilt com.fasterxml.jackson.core:jackson-databind to address 9 CVEs. Fixed in 2.13.4.2-tuxcare.1.
- Record
CLSA-2026-1791781917- Updated
- 2026-11-02
OSVCLSA-2026-1792440931 No score
TuxCare security update for com.fasterxml.jackson.core:jackson-databind (9 CVEs)
TuxCare rebuilt com.fasterxml.jackson.core:jackson-databind to address 9 CVEs. Fixed in 2.9.9.3-tuxcare.1.
- Record
CLSA-2026-1792440931- Updated
- 2026-11-02
OSVCLSA-2026-1792441007 No score
TuxCare security update for com.fasterxml.jackson.core:jackson-databind (9 CVEs)
TuxCare rebuilt com.fasterxml.jackson.core:jackson-databind to address 9 CVEs. Fixed in 2.15.0-tuxcare.1.
- Record
CLSA-2026-1792441007- Updated
- 2026-11-02
OSVCLSA-2026-1792441009 No score
TuxCare security update for com.fasterxml.jackson.core:jackson-databind (10 CVEs)
TuxCare rebuilt com.fasterxml.jackson.core:jackson-databind to address 10 CVEs. Fixed in 2.13.4-tuxcare.1.
- Record
CLSA-2026-1792441009- Updated
- 2026-11-02
OSVCLSA-2026-1792441019 No score
TuxCare security update for com.fasterxml.jackson.core:jackson-databind (12 CVEs)
TuxCare rebuilt com.fasterxml.jackson.core:jackson-databind to address 12 CVEs. Fixed in 2.9.10.7-tuxcare.1.
- Record
CLSA-2026-1792441019- Updated
- 2026-11-02
OSVCLSA-2026-1792441036 No score
TuxCare security update for com.fasterxml.jackson.core:jackson-databind (9 CVEs)
TuxCare rebuilt com.fasterxml.jackson.core:jackson-databind to address 9 CVEs. Fixed in 2.9.9-tuxcare.1.
- Record
CLSA-2026-1792441036- Updated
- 2026-11-02
OSVCLSA-2026-1792441055 No score
TuxCare security update for com.fasterxml.jackson.core:jackson-databind (9 CVEs)
TuxCare rebuilt com.fasterxml.jackson.core:jackson-databind to address 9 CVEs. Fixed in 2.9.9.1-tuxcare.1.
- Record
CLSA-2026-1792441055- Updated
- 2026-11-02
OSVCLSA-2026-1792441073 No score
TuxCare security update for com.fasterxml.jackson.core:jackson-databind (9 CVEs)
TuxCare rebuilt com.fasterxml.jackson.core:jackson-databind to address 9 CVEs. Fixed in 2.13.3-tuxcare.1.
- Record
CLSA-2026-1792441073- Updated
- 2026-11-02
OSVCLSA-2026-1792441135 No score
TuxCare security update for com.fasterxml.jackson.core:jackson-databind (10 CVEs)
TuxCare rebuilt com.fasterxml.jackson.core:jackson-databind to address 10 CVEs. Fixed in 2.9.10.6-tuxcare.1.
- Record
CLSA-2026-1792441135- Updated
- 2026-11-02
OSVCLSA-2026-1792441154 No score
TuxCare security update for com.fasterxml.jackson.core:jackson-databind (10 CVEs)
TuxCare rebuilt com.fasterxml.jackson.core:jackson-databind to address 10 CVEs. Fixed in 2.9.10.4-tuxcare.1.
- Record
CLSA-2026-1792441154- Updated
- 2026-11-02
OSVCLSA-2026-1792441194 No score
TuxCare security update for com.fasterxml.jackson.core:jackson-databind (7 CVEs)
TuxCare rebuilt com.fasterxml.jackson.core:jackson-databind to address 7 CVEs. Fixed in 2.6.7.3-tuxcare.1.
- Record
CLSA-2026-1792441194- Updated
- 2026-11-02
OSVCLSA-2026-1792441195 No score
TuxCare security update for com.fasterxml.jackson.core:jackson-databind (9 CVEs)
TuxCare rebuilt com.fasterxml.jackson.core:jackson-databind to address 9 CVEs. Fixed in 2.9.8-tuxcare.1.
- Record
CLSA-2026-1792441195- Updated
- 2026-11-02
OSVCLSA-2026-1792441222 No score
TuxCare security update for com.fasterxml.jackson.core:jackson-databind (9 CVEs)
TuxCare rebuilt com.fasterxml.jackson.core:jackson-databind to address 9 CVEs. Fixed in 2.9.10.1-tuxcare.1.
- Record
CLSA-2026-1792441222- Updated
- 2026-11-02
OSVCLSA-2026-1792441229 No score
TuxCare security update for com.fasterxml.jackson.core:jackson-databind (7 CVEs)
TuxCare rebuilt com.fasterxml.jackson.core:jackson-databind to address 7 CVEs. Fixed in 2.14.3-tuxcare.1.
- Record
CLSA-2026-1792441229- Updated
- 2026-11-02
OSVCLSA-2026-1792441292 No score
TuxCare security update for com.fasterxml.jackson.core:jackson-databind (9 CVEs)
TuxCare rebuilt com.fasterxml.jackson.core:jackson-databind to address 9 CVEs. Fixed in 2.10.4-tuxcare.1.
- Record
CLSA-2026-1792441292- Updated
- 2026-11-02
OSVCLSA-2026-1792441308 No score
TuxCare security update for com.fasterxml.jackson.core:jackson-databind (8 CVEs)
TuxCare rebuilt com.fasterxml.jackson.core:jackson-databind to address 8 CVEs. Fixed in 2.10.5.1-tuxcare.1.
- Record
CLSA-2026-1792441308- Updated
- 2026-11-02
OSVCLSA-2026-1792441329 No score
TuxCare security update for com.fasterxml.jackson.core:jackson-databind (7 CVEs)
TuxCare rebuilt com.fasterxml.jackson.core:jackson-databind to address 7 CVEs. Fixed in 2.6.7.2-tuxcare.1.
- Record
CLSA-2026-1792441329- Updated
- 2026-11-06
OSVCLSA-2026-1792441360 No score
TuxCare security update for com.fasterxml.jackson.core:jackson-databind (7 CVEs)
TuxCare rebuilt com.fasterxml.jackson.core:jackson-databind to address 7 CVEs. Fixed in 2.9.10-tuxcare.1.
- Record
CLSA-2026-1792441360- Updated
- 2026-11-02
OSVCLSA-2026-1792441426 No score
TuxCare security update for com.fasterxml.jackson.core:jackson-databind (6 CVEs)
TuxCare rebuilt com.fasterxml.jackson.core:jackson-databind to address 6 CVEs. Fixed in 2.15.4-tuxcare.1.
- Record
CLSA-2026-1792441426- Updated
- 2026-11-02
OSVCLSA-2026-1792441448 No score
TuxCare security update for com.fasterxml.jackson.core:jackson-databind (6 CVEs)
TuxCare rebuilt com.fasterxml.jackson.core:jackson-databind to address 6 CVEs. Fixed in 2.15.3-tuxcare.1.
- Record
CLSA-2026-1792441448- Updated
- 2026-11-02
OSVCLSA-2026-1792441468 No score
TuxCare security update for com.fasterxml.jackson.core:jackson-databind (7 CVEs)
TuxCare rebuilt com.fasterxml.jackson.core:jackson-databind to address 7 CVEs. Fixed in 2.10.0-tuxcare.1.
- Record
CLSA-2026-1792441468- Updated
- 2026-11-02
OSVCLSA-2026-1792441542 No score
TuxCare security update for com.fasterxml.jackson.core:jackson-databind (7 CVEs)
TuxCare rebuilt com.fasterxml.jackson.core:jackson-databind to address 7 CVEs. Fixed in 2.12.1-tuxcare.2.
- Record
CLSA-2026-1792441542- Updated
- 2026-11-02
OSVCLSA-2026-1792441544 No score
TuxCare security update for com.fasterxml.jackson.core:jackson-databind (5 CVEs)
TuxCare rebuilt com.fasterxml.jackson.core:jackson-databind to address 5 CVEs. Fixed in 2.7.9.7-tuxcare.1.
- Record
CLSA-2026-1792441544- Updated
- 2026-11-02
OSVCLSA-2026-1792441559 No score
TuxCare security update for com.fasterxml.jackson.core:jackson-databind (5 CVEs)
TuxCare rebuilt com.fasterxml.jackson.core:jackson-databind to address 5 CVEs. Fixed in 2.7.0-tuxcare.1.
- Record
CLSA-2026-1792441559- Updated
- 2026-11-02
OSVCLSA-2026-1792441587 No score
TuxCare security update for com.fasterxml.jackson.core:jackson-databind (6 CVEs)
TuxCare rebuilt com.fasterxml.jackson.core:jackson-databind to address 6 CVEs. Fixed in 2.9.10.8-tuxcare.1.
- Record
CLSA-2026-1792441587- Updated
- 2026-11-02
OSVCLSA-2026-1792441664 No score
TuxCare security update for com.fasterxml.jackson.core:jackson-databind (6 CVEs)
TuxCare rebuilt com.fasterxml.jackson.core:jackson-databind to address 6 CVEs. Fixed in 2.15.2-tuxcare.1.
- Record
CLSA-2026-1792441664- Updated
- 2026-11-02
OSVCLSA-2026-1792441670 No score
TuxCare security update for com.fasterxml.jackson.core:jackson-databind (11 CVEs)
TuxCare rebuilt com.fasterxml.jackson.core:jackson-databind to address 11 CVEs. Fixed in 2.6.7.1-tuxcare.1.
- Record
CLSA-2026-1792441670- Updated
- 2026-11-06
OSVCLSA-2026-1792441755 No score
TuxCare security update for com.fasterxml.jackson.core:jackson-databind (8 CVEs)
TuxCare rebuilt com.fasterxml.jackson.core:jackson-databind to address 8 CVEs. Fixed in 2.18.5-tuxcare.1.
- Record
CLSA-2026-1792441755- Updated
- 2026-11-02
OSVCLSA-2026-1792441770 No score
TuxCare security update for com.fasterxml.jackson.core:jackson-databind (10 CVEs)
TuxCare rebuilt com.fasterxml.jackson.core:jackson-databind to address 10 CVEs. Fixed in 2.11.4-tuxcare.1.
- Record
CLSA-2026-1792441770- Updated
- 2026-11-02
OSVCLSA-2026-1792441805 No score
TuxCare security update for com.fasterxml.jackson.core:jackson-databind (4 CVEs)
TuxCare rebuilt com.fasterxml.jackson.core:jackson-databind to address 4 CVEs. Fixed in 2.7.9-tuxcare.1.
- Record
CLSA-2026-1792441805- Updated
- 2026-11-02
OSVCLSA-2026-1792441821 No score
TuxCare security update for com.fasterxml.jackson.core:jackson-databind (5 CVEs)
TuxCare rebuilt com.fasterxml.jackson.core:jackson-databind to address 5 CVEs. Fixed in 2.7.9.3-tuxcare.1.
- Record
CLSA-2026-1792441821- Updated
- 2026-11-02
OSVCLSA-2026-1792441898 No score
TuxCare security update for com.fasterxml.jackson.core:jackson-databind (4 CVEs)
TuxCare rebuilt com.fasterxml.jackson.core:jackson-databind to address 4 CVEs. Fixed in 2.7.8-tuxcare.1.
- Record
CLSA-2026-1792441898- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
com.fasterxml.jackson.core:jackson-databindMaven |
2.0.0 up to 2.18.8 | 2.18.8 |
com.fasterxml.jackson.core:jackson-databindMaven |
2.19.0 up to 2.21.4 | 2.21.4 |
com.fasterxml.jackson.core:jackson-databindMaven |
3.0.0 up to 3.1.4 | 3.1.4 |
tools.jackson.core:jackson-databindMaven |
2.19.0 up to 2.21.4 | 2.21.4 |
tools.jackson.core:jackson-databindMaven |
3.0.0 up to 3.1.4 | 3.1.4 |
pki-jackson-databindTuxCare:AlmaLinux:9.6 |
before 2.19.1-1.el9_6.tuxcare.els1 | 2.19.1-1.el9_6.tuxcare.els1 |
com.fasterxml.jackson.core:jackson-databindTuxCare:Maven From an advisory covering 3 CVEs |
2.14.2 up to 2.14.2-tuxcare.2, plus listed versions 2.14.2-tuxcare.1 |
2.14.2-tuxcare.2 |
com.fasterxml.jackson.core:jackson-databindTuxCare:Maven From an advisory covering 5 CVEs |
2.14.1 up to 2.14.1-tuxcare.1 | 2.14.1-tuxcare.1 |
com.fasterxml.jackson.core:jackson-databindTuxCare:Maven From an advisory covering 8 CVEs |
2.17.2 up to 2.17.2-tuxcare.1 | 2.17.2-tuxcare.1 |
com.fasterxml.jackson.core:jackson-databindTuxCare:Maven From an advisory covering 8 CVEs |
2.17.3 up to 2.17.3-tuxcare.3, plus listed versions 2.17.3-tuxcare.12.17.3-tuxcare.2 |
2.17.3-tuxcare.3 |
Show 170 moreShow less
| Package | Affected | Fixed |
|---|---|---|
com.fasterxml.jackson.core:jackson-databindTuxCare:Maven From an advisory covering 7 CVEs |
2.8.11 up to 2.8.11-tuxcare.1 | 2.8.11-tuxcare.1 |
com.fasterxml.jackson.core:jackson-databindTuxCare:Maven From an advisory covering 8 CVEs |
2.11.1 up to 2.11.1-tuxcare.1 | 2.11.1-tuxcare.1 |
com.fasterxml.jackson.core:jackson-databindTuxCare:Maven From an advisory covering 8 CVEs |
2.11.3 up to 2.11.3-tuxcare.1 | 2.11.3-tuxcare.1 |
com.fasterxml.jackson.core:jackson-databindTuxCare:Maven From an advisory covering 9 CVEs |
2.9.10.3 up to 2.9.10.3-tuxcare.1 | 2.9.10.3-tuxcare.1 |
com.fasterxml.jackson.core:jackson-databindTuxCare:Maven From an advisory covering 6 CVEs |
2.17.1 up to 2.17.1-tuxcare.1 | 2.17.1-tuxcare.1 |
com.fasterxml.jackson.core:jackson-databindTuxCare:Maven From an advisory covering 8 CVEs |
2.13.4.2 up to 2.13.4.2-tuxcare.1 | 2.13.4.2-tuxcare.1 |
com.fasterxml.jackson.core:jackson-databindTuxCare:Maven From an advisory covering 8 CVEs |
2.9.9.3 up to 2.9.9.3-tuxcare.1 | 2.9.9.3-tuxcare.1 |
com.fasterxml.jackson.core:jackson-databindTuxCare:Maven From an advisory covering 8 CVEs |
2.15.0 up to 2.15.0-tuxcare.1 | 2.15.0-tuxcare.1 |
com.fasterxml.jackson.core:jackson-databindTuxCare:Maven From an advisory covering 9 CVEs |
2.13.4 up to 2.13.4-tuxcare.1 | 2.13.4-tuxcare.1 |
com.fasterxml.jackson.core:jackson-databindTuxCare:Maven From an advisory covering 11 CVEs |
2.9.10.7 up to 2.9.10.7-tuxcare.1 | 2.9.10.7-tuxcare.1 |
com.fasterxml.jackson.core:jackson-databindTuxCare:Maven From an advisory covering 8 CVEs |
2.9.9 up to 2.9.9-tuxcare.1 | 2.9.9-tuxcare.1 |
com.fasterxml.jackson.core:jackson-databindTuxCare:Maven From an advisory covering 8 CVEs |
2.9.9.1 up to 2.9.9.1-tuxcare.1 | 2.9.9.1-tuxcare.1 |
com.fasterxml.jackson.core:jackson-databindTuxCare:Maven From an advisory covering 8 CVEs |
2.13.3 up to 2.13.3-tuxcare.1 | 2.13.3-tuxcare.1 |
com.fasterxml.jackson.core:jackson-databindTuxCare:Maven From an advisory covering 9 CVEs |
2.9.10.6 up to 2.9.10.6-tuxcare.1 | 2.9.10.6-tuxcare.1 |
com.fasterxml.jackson.core:jackson-databindTuxCare:Maven From an advisory covering 9 CVEs |
2.9.10.4 up to 2.9.10.4-tuxcare.1 | 2.9.10.4-tuxcare.1 |
com.fasterxml.jackson.core:jackson-databindTuxCare:Maven From an advisory covering 7 CVEs |
2.6.7.3 up to 2.6.7.3-tuxcare.1 | 2.6.7.3-tuxcare.1 |
com.fasterxml.jackson.core:jackson-databindTuxCare:Maven From an advisory covering 8 CVEs |
2.9.8 up to 2.9.8-tuxcare.1 | 2.9.8-tuxcare.1 |
com.fasterxml.jackson.core:jackson-databindTuxCare:Maven From an advisory covering 8 CVEs |
2.9.10.1 up to 2.9.10.1-tuxcare.1 | 2.9.10.1-tuxcare.1 |
com.fasterxml.jackson.core:jackson-databindTuxCare:Maven From an advisory covering 6 CVEs |
2.14.3 up to 2.14.3-tuxcare.1 | 2.14.3-tuxcare.1 |
com.fasterxml.jackson.core:jackson-databindTuxCare:Maven From an advisory covering 8 CVEs |
2.10.4 up to 2.10.4-tuxcare.1 | 2.10.4-tuxcare.1 |
com.fasterxml.jackson.core:jackson-databindTuxCare:Maven From an advisory covering 7 CVEs |
2.10.5.1 up to 2.10.5.1-tuxcare.1 | 2.10.5.1-tuxcare.1 |
com.fasterxml.jackson.core:jackson-databindTuxCare:Maven From an advisory covering 7 CVEs |
2.6.7.2 up to 2.6.7.2-tuxcare.1 | 2.6.7.2-tuxcare.1 |
com.fasterxml.jackson.core:jackson-databindTuxCare:Maven From an advisory covering 6 CVEs |
2.9.10 up to 2.9.10-tuxcare.1 | 2.9.10-tuxcare.1 |
com.fasterxml.jackson.core:jackson-databindTuxCare:Maven From an advisory covering 6 CVEs |
2.15.4 up to 2.15.4-tuxcare.1 | 2.15.4-tuxcare.1 |
com.fasterxml.jackson.core:jackson-databindTuxCare:Maven From an advisory covering 6 CVEs |
2.15.3 up to 2.15.3-tuxcare.1 | 2.15.3-tuxcare.1 |
com.fasterxml.jackson.core:jackson-databindTuxCare:Maven From an advisory covering 6 CVEs |
2.10.0 up to 2.10.0-tuxcare.1 | 2.10.0-tuxcare.1 |
com.fasterxml.jackson.core:jackson-databindTuxCare:Maven From an advisory covering 6 CVEs |
2.12.1 up to 2.12.1-tuxcare.2, plus listed versions 2.12.1-tuxcare.1 |
2.12.1-tuxcare.2 |
com.fasterxml.jackson.core:jackson-databindTuxCare:Maven From an advisory covering 5 CVEs |
2.7.9.7 up to 2.7.9.7-tuxcare.1 | 2.7.9.7-tuxcare.1 |
com.fasterxml.jackson.core:jackson-databindTuxCare:Maven From an advisory covering 5 CVEs |
2.7.0 up to 2.7.0-tuxcare.1 | 2.7.0-tuxcare.1 |
com.fasterxml.jackson.core:jackson-databindTuxCare:Maven From an advisory covering 5 CVEs |
2.9.10.8 up to 2.9.10.8-tuxcare.1 | 2.9.10.8-tuxcare.1 |
com.fasterxml.jackson.core:jackson-databindTuxCare:Maven From an advisory covering 6 CVEs |
2.15.2 up to 2.15.2-tuxcare.1 | 2.15.2-tuxcare.1 |
com.fasterxml.jackson.core:jackson-databindTuxCare:Maven From an advisory covering 11 CVEs |
2.6.7.1 up to 2.6.7.1-tuxcare.1 | 2.6.7.1-tuxcare.1 |
com.fasterxml.jackson.core:jackson-databindTuxCare:Maven From an advisory covering 7 CVEs |
2.18.5 up to 2.18.5-tuxcare.1 | 2.18.5-tuxcare.1 |
com.fasterxml.jackson.core:jackson-databindTuxCare:Maven From an advisory covering 9 CVEs |
2.11.4 up to 2.11.4-tuxcare.1 | 2.11.4-tuxcare.1 |
com.fasterxml.jackson.core:jackson-databindTuxCare:Maven From an advisory covering 4 CVEs |
2.7.9 up to 2.7.9-tuxcare.1 | 2.7.9-tuxcare.1 |
com.fasterxml.jackson.core:jackson-databindTuxCare:Maven From an advisory covering 5 CVEs |
2.7.9.3 up to 2.7.9.3-tuxcare.1 | 2.7.9.3-tuxcare.1 |
com.fasterxml.jackson.core:jackson-databindTuxCare:Maven From an advisory covering 4 CVEs |
2.7.8 up to 2.7.8-tuxcare.1 | 2.7.8-tuxcare.1 |
com.fasterxml.jackson.core:jackson-databindTuxCare:Maven From an advisory covering 2 CVEs |
2.18.3 up to 2.18.3-tuxcare.1 | 2.18.3-tuxcare.1 |
com.fasterxml.jackson.core:jackson-databindTuxCare:Maven From an advisory covering 2 CVEs |
2.18.0 up to 2.18.0-tuxcare.1 | 2.18.0-tuxcare.1 |
com.fasterxml.jackson.core:jackson-databindTuxCare:Maven From an advisory covering 10 CVEs |
2.11.2 up to 2.11.2-tuxcare.1 | 2.11.2-tuxcare.1 |
com.fasterxml.jackson.core:jackson-databindTuxCare:Maven From an advisory covering 19 CVEs |
2.9.10.5 up to 2.9.10.5-tuxcare.1 | 2.9.10.5-tuxcare.1 |
com.fasterxml.jackson.core:jackson-databindTuxCare:Maven From an advisory covering 6 CVEs |
2.16.1 up to 2.16.1-tuxcare.1 | 2.16.1-tuxcare.1 |
com.fasterxml.jackson.core:jackson-databindTuxCare:Maven From an advisory covering 8 CVEs |
2.13.5 up to 2.13.5-tuxcare.1 | 2.13.5-tuxcare.1 |
com.fasterxml.jackson.core:jackson-databindTuxCare:Maven From an advisory covering 6 CVEs |
2.19.2 up to 2.19.2-tuxcare.1 | 2.19.2-tuxcare.1 |
com.fasterxml.jackson.core:jackson-databindTuxCare:Maven From an advisory covering 3 CVEs |
2.4.1.1 up to 2.4.1.1-tuxcare.1 | 2.4.1.1-tuxcare.1 |
com.fasterxml.jackson.core:jackson-databindTuxCare:Maven From an advisory covering 6 CVEs |
2.19.4 up to 2.19.4-tuxcare.1 | 2.19.4-tuxcare.1 |
com.fasterxml.jackson.core:jackson-databindTuxCare:Maven From an advisory covering 6 CVEs |
2.19.0 up to 2.19.0-tuxcare.1 | 2.19.0-tuxcare.1 |
com.fasterxml.jackson.core:jackson-databindTuxCare:Maven From an advisory covering 7 CVEs |
2.20.1 up to 2.20.1-tuxcare.1 | 2.20.1-tuxcare.1 |
com.fasterxml.jackson.core:jackson-databindTuxCare:Maven From an advisory covering 2 CVEs |
2.4.3 up to 2.4.3-tuxcare.1 | 2.4.3-tuxcare.1 |
com.fasterxml.jackson.core:jackson-databindTuxCare:Maven From an advisory covering 5 CVEs |
2.7.3 up to 2.7.3-tuxcare.1 | 2.7.3-tuxcare.1 |
com.fasterxml.jackson.core:jackson-databindTuxCare:Maven From an advisory covering 3 CVEs |
2.4.5 up to 2.4.5-tuxcare.1 | 2.4.5-tuxcare.1 |
com.fasterxml.jackson.core:jackson-databindTuxCare:Maven From an advisory covering 4 CVEs |
2.6.3 up to 2.6.3-tuxcare.1 | 2.6.3-tuxcare.1 |
com.fasterxml.jackson.core:jackson-databindTuxCare:Maven From an advisory covering 4 CVEs |
2.7.5 up to 2.7.5-tuxcare.1 | 2.7.5-tuxcare.1 |
com.fasterxml.jackson.core:jackson-databindTuxCare:Maven From an advisory covering 6 CVEs |
2.6.4 up to 2.6.4-tuxcare.1 | 2.6.4-tuxcare.1 |
com.fasterxml.jackson.core:jackson-databindTuxCare:Maven From an advisory covering 9 CVEs |
2.6.5 up to 2.6.5-tuxcare.1 | 2.6.5-tuxcare.1 |
com.fasterxml.jackson.core:jackson-databindTuxCare:Maven From an advisory covering 5 CVEs |
2.7.1 up to 2.7.1-tuxcare.1 | 2.7.1-tuxcare.1 |
com.fasterxml.jackson.core:jackson-databindTuxCare:Maven From an advisory covering 4 CVEs |
2.5.4 up to 2.5.4-tuxcare.1 | 2.5.4-tuxcare.1 |
com.fasterxml.jackson.core:jackson-databindTuxCare:Maven From an advisory covering 8 CVEs |
2.6.6 up to 2.6.6-tuxcare.1 | 2.6.6-tuxcare.1 |
com.fasterxml.jackson.core:jackson-databindTuxCare:Maven From an advisory covering 7 CVEs |
2.8.11.3 up to 2.8.11.3-tuxcare.1 | 2.8.11.3-tuxcare.1 |
com.fasterxml.jackson.core:jackson-databindTuxCare:Maven From an advisory covering 7 CVEs |
2.8.10 up to 2.8.10-tuxcare.1 | 2.8.10-tuxcare.1 |
com.fasterxml.jackson.core:jackson-databindTuxCare:Maven From an advisory covering 7 CVEs |
2.8.5 up to 2.8.5-tuxcare.1 | 2.8.5-tuxcare.1 |
com.fasterxml.jackson.core:jackson-databindTuxCare:Maven From an advisory covering 7 CVEs |
2.8.11.1 up to 2.8.11.1-tuxcare.1 | 2.8.11.1-tuxcare.1 |
com.fasterxml.jackson.core:jackson-databindTuxCare:Maven From an advisory covering 7 CVEs |
2.8.7 up to 2.8.7-tuxcare.1 | 2.8.7-tuxcare.1 |
com.fasterxml.jackson.core:jackson-databindTuxCare:Maven From an advisory covering 7 CVEs |
2.8.11.4 up to 2.8.11.4-tuxcare.1 | 2.8.11.4-tuxcare.1 |
com.fasterxml.jackson.core:jackson-databindTuxCare:Maven From an advisory covering 7 CVEs |
2.8.4 up to 2.8.4-tuxcare.1 | 2.8.4-tuxcare.1 |
com.fasterxml.jackson.core:jackson-databindTuxCare:Maven From an advisory covering 6 CVEs |
2.9.3 up to 2.9.3-tuxcare.1 | 2.9.3-tuxcare.1 |
com.fasterxml.jackson.core:jackson-databindTuxCare:Maven From an advisory covering 7 CVEs |
2.9.1 up to 2.9.1-tuxcare.1 | 2.9.1-tuxcare.1 |
com.fasterxml.jackson.core:jackson-databindTuxCare:Maven From an advisory covering 7 CVEs |
2.9.7 up to 2.9.7-tuxcare.1 | 2.9.7-tuxcare.1 |
com.fasterxml.jackson.core:jackson-databindTuxCare:Maven From an advisory covering 7 CVEs |
2.9.2 up to 2.9.2-tuxcare.1 | 2.9.2-tuxcare.1 |
com.fasterxml.jackson.core:jackson-databindTuxCare:Maven From an advisory covering 7 CVEs |
2.9.5 up to 2.9.5-tuxcare.1 | 2.9.5-tuxcare.1 |
com.fasterxml.jackson.core:jackson-databindTuxCare:Maven From an advisory covering 7 CVEs |
2.10.3 up to 2.10.3-tuxcare.1 | 2.10.3-tuxcare.1 |
com.fasterxml.jackson.core:jackson-databindTuxCare:Maven From an advisory covering 7 CVEs |
2.10.2 up to 2.10.2-tuxcare.1 | 2.10.2-tuxcare.1 |
com.fasterxml.jackson.core:jackson-databindTuxCare:Maven From an advisory covering 8 CVEs |
2.11.0 up to 2.11.0-tuxcare.1 | 2.11.0-tuxcare.1 |
com.fasterxml.jackson.core:jackson-databindTuxCare:Maven From an advisory covering 7 CVEs |
2.9.4 up to 2.9.4-tuxcare.1 | 2.9.4-tuxcare.1 |
com.fasterxml.jackson.core:jackson-databindTuxCare:Maven From an advisory covering 5 CVEs |
2.16.0 up to 2.16.0-tuxcare.1 | 2.16.0-tuxcare.1 |
com.fasterxml.jackson.core:jackson-databindTuxCare:Maven From an advisory covering 2 CVEs |
2.18.2 up to 2.18.2-tuxcare.1 | 2.18.2-tuxcare.1 |
com.fasterxml.jackson.core:jackson-databindTuxCare:Maven From an advisory covering 2 CVEs |
2.18.4 up to 2.18.4-tuxcare.1 | 2.18.4-tuxcare.1 |
com.fasterxml.jackson.core:jackson-databindTuxCare:Maven From an advisory covering 6 CVEs |
2.17.0 up to 2.17.0-tuxcare.1 | 2.17.0-tuxcare.1 |
com.fasterxml.jackson.core:jackson-databindTuxCare:Maven From an advisory covering 7 CVEs |
2.16.2 up to 2.16.2-tuxcare.1 | 2.16.2-tuxcare.1 |
com.fasterxml.jackson.core:jackson-databindTuxCare:Maven From an advisory covering 6 CVEs |
2.15.1 up to 2.15.1-tuxcare.1 | 2.15.1-tuxcare.1 |
com.fasterxml.jackson.core:jackson-databindTuxCare:Maven From an advisory covering 7 CVEs |
2.21.2 up to 2.21.2-tuxcare.1 | 2.21.2-tuxcare.1 |
com.fasterxml.jackson.core:jackson-databindTuxCare:Maven From an advisory covering 3 CVEs |
2.12.6.1 up to 2.12.6.1-tuxcare.2, plus listed versions 2.12.6.1-tuxcare.1 |
2.12.6.1-tuxcare.2 |
com.fasterxml.jackson.core:jackson-databindTuxCare:Maven From an advisory covering 3 CVEs |
2.12.7 up to 2.12.7-tuxcare.2, plus listed versions 2.12.7-tuxcare.1 |
2.12.7-tuxcare.2 |
com.fasterxml.jackson.core:jackson-databindTuxCare:Maven From an advisory covering 5 CVEs |
2.12.4 up to 2.12.4-tuxcare.2, plus listed versions 2.12.4-tuxcare.1 |
2.12.4-tuxcare.2 |
com.fasterxml.jackson.core:jackson-databindTuxCare:Maven From an advisory covering 5 CVEs |
2.12.5 up to 2.12.5-tuxcare.2, plus listed versions 2.12.5-tuxcare.1 |
2.12.5-tuxcare.2 |
com.fasterxml.jackson.core:jackson-databindTuxCare:Maven From an advisory covering 4 CVEs |
2.13.1 up to 2.13.1-tuxcare.2, plus listed versions 2.13.1-tuxcare.1 |
2.13.1-tuxcare.2 |
com.fasterxml.jackson.core:jackson-databindTuxCare:Maven From an advisory covering 3 CVEs |
2.12.7.1 up to 2.12.7.1-tuxcare.3, plus listed versions 2.12.7.1-tuxcare.12.12.7.1-tuxcare.2 |
2.12.7.1-tuxcare.3 |
com.fasterxml.jackson.core:jackson-databindTuxCare:Maven From an advisory covering 8 CVEs |
2.4.0 up to 2.4.0-tuxcare.2, plus listed versions 2.4.0-tuxcare.1 |
2.4.0-tuxcare.2 |
com.fasterxml.jackson.core:jackson-databindTuxCare:Maven From an advisory covering 3 CVEs |
2.13.0 up to 2.13.0-tuxcare.2, plus listed versions 2.13.0-tuxcare.1 |
2.13.0-tuxcare.2 |
com.fasterxml.jackson.core:jackson-databindTuxCare:Maven From an advisory covering 10 CVEs |
2.12.6 up to 2.12.6-tuxcare.2, plus listed versions 2.12.6-tuxcare.1 |
2.12.6-tuxcare.2 |
com.fasterxml.jackson.core:jackson-databindTuxCare:Maven From an advisory covering 12 CVEs |
2.4.1 up to 2.4.1-tuxcare.2, plus listed versions 2.4.1-tuxcare.1 |
2.4.1-tuxcare.2 |
tools.jackson.core:jackson-databindTuxCare:Maven From an advisory covering 6 CVEs |
3.1.2 up to 3.1.2-tuxcare.1 | 3.1.2-tuxcare.1 |
com.fasterxml.jackson.core:jackson-databindTuxCare:Maven From an advisory covering 10 CVEs |
2.12.2 up to 2.12.2-tuxcare.3, plus listed versions 2.12.2-tuxcare.12.12.2-tuxcare.2 |
2.12.2-tuxcare.3 |
jackson-databindDebian:12 |
All versions, plus listed versions 2.14.0+ds-12.14.0+ds-22.14.0+ds-32.14.0-12.14.0-1+deb12u12.18.11-12.22.4-1 |
None known |
jackson-databindDebian:13 |
All versions, plus listed versions 2.14.0+ds-12.14.0+ds-1+deb13u12.14.0+ds-22.14.0+ds-32.18.11-12.22.4-1 |
None known |
jackson-databindDebian:14 |
before 2.18.11-1, plus listed versions 2.14.0+ds-12.14.0+ds-22.14.0+ds-3 |
2.18.11-1 |
com.fasterxml.jackson.core:jackson-databindMaven |
2.0.0 up to 2.18.8, plus listed versions 2.0.12.0.22.0.42.0.52.0.6 Show 45 moreShow less2.1.02.1.12.1.22.1.32.1.42.1.52.10.02.10.0.pr12.10.0.pr22.10.0.pr32.10.12.10.22.10.32.10.42.10.52.10.5.12.11.02.11.0.rc12.11.12.11.22.11.32.11.42.12.02.12.0-rc12.12.0-rc22.12.12.12.22.12.32.12.42.12.52.12.62.12.6.12.12.72.12.7.12.12.7.22.13.02.13.0-rc12.13.0-rc22.13.12.13.22.13.2.12.13.2.22.13.32.13.42.13.4.1 |
2.18.8 |
com.fasterxml.jackson.core:jackson-databindMaven |
2.19.0 up to 2.21.4, plus listed versions 2.19.12.19.22.19.32.19.42.20.0 Show 7 moreShow less2.20.0-rc12.20.12.20.22.21.02.21.12.21.22.21.3 |
2.21.4 |
tools.jackson.core:jackson-databindMaven |
3.0.0 up to 3.1.4, plus listed versions 3.0.13.0.23.0.33.0.43.1.0 Show 4 moreShow less3.1.0-rc13.1.13.1.23.1.3 |
3.1.4 |
com.fasterxml.jackson.core:jackson-databindRed Hat Lightwell:Maven From an advisory covering 8 CVEs |
before 2.17.3.rhlw-00013, plus listed versions 2.0.02.0.0-RC12.0.0-RC22.0.0-RC32.0.1 Show 45 moreShow less2.0.22.0.42.0.52.0.62.1.02.1.12.1.22.1.32.1.42.1.52.10.02.10.0.pr12.10.0.pr22.10.0.pr32.10.12.10.22.10.32.10.42.10.52.10.5.12.11.02.11.0.rc12.11.12.11.22.11.32.11.42.12.02.12.0-rc12.12.0-rc22.12.12.12.22.12.32.12.42.12.52.12.62.12.6.12.12.72.12.7.12.12.7.22.13.02.13.0-rc12.13.0-rc22.13.12.13.22.13.2.1 |
2.17.3.rhlw-00013 |
com.fasterxml.jackson.core:jackson-databindRed Hat Lightwell:Maven From an advisory covering 7 CVEs |
before 2.18.0.rhlw-00010, plus listed versions 2.0.02.0.0-RC12.0.0-RC22.0.0-RC32.0.1 Show 45 moreShow less2.0.22.0.42.0.52.0.62.1.02.1.12.1.22.1.32.1.42.1.52.10.02.10.0.pr12.10.0.pr22.10.0.pr32.10.12.10.22.10.32.10.42.10.52.10.5.12.11.02.11.0.rc12.11.12.11.22.11.32.11.42.12.02.12.0-rc12.12.0-rc22.12.12.12.22.12.32.12.42.12.52.12.62.12.6.12.12.72.12.7.12.12.7.22.13.02.13.0-rc12.13.0-rc22.13.12.13.22.13.2.1 |
2.18.0.rhlw-00010 |
com.fasterxml.jackson.core:jackson-databindRed Hat Lightwell:Maven From an advisory covering 4 CVEs |
before 2.13.4.1-rhlw-00013, plus listed versions 2.0.02.0.0-RC12.0.0-RC22.0.0-RC32.0.1 Show 45 moreShow less2.0.22.0.42.0.52.0.62.1.02.1.12.1.22.1.32.1.42.1.52.10.02.10.0.pr12.10.0.pr22.10.0.pr32.10.12.10.22.10.32.10.42.10.52.10.5.12.11.02.11.0.rc12.11.12.11.22.11.32.11.42.12.02.12.0-rc12.12.0-rc22.12.12.12.22.12.32.12.42.12.52.12.62.12.6.12.12.72.12.7.12.12.7.22.13.02.13.0-rc12.13.0-rc22.13.12.13.22.13.2.1 |
2.13.4.1-rhlw-00013 |
com.fasterxml.jackson.core:jackson-databindRed Hat Lightwell:Maven |
before 2.13.4.rhlw-00027, plus listed versions 2.0.02.0.0-RC12.0.0-RC22.0.0-RC32.0.1 Show 45 moreShow less2.0.22.0.42.0.52.0.62.1.02.1.12.1.22.1.32.1.42.1.52.10.02.10.0.pr12.10.0.pr22.10.0.pr32.10.12.10.22.10.32.10.42.10.52.10.5.12.11.02.11.0.rc12.11.12.11.22.11.32.11.42.12.02.12.0-rc12.12.0-rc22.12.12.12.22.12.32.12.42.12.52.12.62.12.6.12.12.72.12.7.12.12.7.22.13.02.13.0-rc12.13.0-rc22.13.12.13.22.13.2.1 |
2.13.4.rhlw-00027 |
com.fasterxml.jackson.core:jackson-databindRoot:Maven |
before 2.18.2-aikido.2 | 2.18.2-aikido.22.14.2-aikido.22.16.2-aikido.42.15.2-aikido.22.21.1-aikido.22.20.0-aikido.22.18.3-aikido.22.18.2-aikido.32.13.4.2-aikido.22.13.3-aikido.52.17.0-aikido.42.18.1-aikido.22.21.2-aikido.32.18.6-aikido.22.15.0-aikido.22.13.2.2-aikido.42.17.2-aikido.42.19.4-aikido.22.14.3-aikido.22.15.3-aikido.22.12.3-aikido.52.12.4-aikido.43.1.1-aikido.22.10.1-aikido.52.18.7-aikido.22.13.4-aikido.52.12.5-aikido.42.14.1-aikido.22.18.0-aikido.42.17.1-aikido.12.19.4-aikido.32.16.0-aikido.12.14.2-aikido.32.18.1-aikido.32.19.4-aikido.42.17.2-aikido.52.15.0-aikido.32.16.2-aikido.52.17.1-aikido.22.20.0-aikido.32.16.0-aikido.22.21.1-aikido.32.15.2-aikido.32.18.3-aikido.32.13.3-aikido.62.13.3-aikido.72.14.2-aikido.42.21.1-aikido.42.13.4.2-aikido.32.13.2.2-aikido.52.18.1-aikido.42.17.2-aikido.62.16.0-aikido.32.17.1-aikido.32.18.3-aikido.42.21.2-aikido.42.19.4-aikido.52.20.0-aikido.42.15.2-aikido.42.15.0-aikido.42.16.2-aikido.62.18.2-aikido.42.18.3-aikido.52.21.2-aikido.52.18.8-aikido.12.21.4-aikido.12.21.4-aikido.22.18.8-aikido.2 |
tools.jackson.core:jackson-databindRoot:Maven |
before 3.1.0-aikido.2 | 3.1.0-aikido.23.1.1-aikido.33.1.0-aikido.33.1.1-aikido.43.1.0-aikido.43.1.0-aikido.53.1.1-aikido.53.1.4-aikido.23.1.4-aikido.33.1.4-aikido.4 |
io.root.com.fasterxml.jackson.core:jackson-databindRoot:Maven |
before 2.18.2-root.io.2 | 2.18.2-root.io.22.14.2-root.io.22.16.2-root.io.42.15.2-root.io.22.21.1-root.io.22.20.0-root.io.22.18.3-root.io.22.18.2-root.io.32.13.4.2-root.io.22.13.3-root.io.52.17.0-root.io.42.18.1-root.io.22.21.2-root.io.32.18.6-root.io.22.15.0-root.io.22.13.2.2-root.io.42.17.2-root.io.42.19.4-root.io.22.14.3-root.io.22.15.3-root.io.22.12.3-root.io.52.12.4-root.io.43.1.1-root.io.22.10.1-root.io.52.18.7-root.io.22.13.4-root.io.52.12.5-root.io.42.14.1-root.io.22.18.0-root.io.42.17.1-root.io.12.19.4-root.io.32.16.0-root.io.12.14.2-root.io.32.18.1-root.io.32.19.4-root.io.42.17.2-root.io.52.15.0-root.io.32.16.2-root.io.52.17.1-root.io.22.20.0-root.io.32.16.0-root.io.22.21.1-root.io.32.15.2-root.io.32.18.3-root.io.32.13.3-root.io.62.13.3-root.io.72.14.2-root.io.42.21.1-root.io.42.13.4.2-root.io.32.13.2.2-root.io.52.18.1-root.io.42.17.2-root.io.62.16.0-root.io.32.17.1-root.io.32.18.3-root.io.42.21.2-root.io.42.19.4-root.io.52.20.0-root.io.42.15.2-root.io.42.15.0-root.io.42.16.2-root.io.62.18.2-root.io.42.18.3-root.io.52.21.2-root.io.52.18.8-root.io.12.21.4-root.io.12.21.4-root.io.22.18.8-root.io.2 |
io.root.tools.jackson.core:jackson-databindRoot:Maven |
before 3.1.0-root.io.2 | 3.1.0-root.io.23.1.1-root.io.33.1.0-root.io.33.1.1-root.io.43.1.0-root.io.43.1.0-root.io.53.1.1-root.io.53.1.4-root.io.23.1.4-root.io.33.1.4-root.io.4 |
jackson-annotationsSUSE:Linux Enterprise Server 16.0 From an advisory covering 4 CVEs |
before 2.18.8-160000.1.1 | 2.18.8-160000.1.1 |
jackson-coreSUSE:Linux Enterprise Server 16.0 From an advisory covering 4 CVEs |
before 2.18.8-160000.1.1 | 2.18.8-160000.1.1 |
jackson-databindSUSE:Linux Enterprise Server 16.0 From an advisory covering 4 CVEs |
before 2.18.8-160000.1.1 | 2.18.8-160000.1.1 |
jackson-annotationsSUSE:Linux Enterprise Server for SAP applications 16.0 From an advisory covering 4 CVEs |
before 2.18.8-160000.1.1 | 2.18.8-160000.1.1 |
jackson-coreSUSE:Linux Enterprise Server for SAP applications 16.0 From an advisory covering 4 CVEs |
before 2.18.8-160000.1.1 | 2.18.8-160000.1.1 |
jackson-databindSUSE:Linux Enterprise Server for SAP applications 16.0 From an advisory covering 4 CVEs |
before 2.18.8-160000.1.1 | 2.18.8-160000.1.1 |
jackson-annotationsSUSE:Linux Enterprise Module for Basesystem 15 SP7 From an advisory covering 4 CVEs |
before 2.18.8-150200.3.22.3 | 2.18.8-150200.3.22.3 |
jackson-coreSUSE:Linux Enterprise Module for Basesystem 15 SP7 From an advisory covering 4 CVEs |
before 2.18.8-150200.3.22.3 | 2.18.8-150200.3.22.3 |
jackson-databindSUSE:Linux Enterprise Module for Basesystem 15 SP7 From an advisory covering 4 CVEs |
before 2.18.8-150200.3.28.2 | 2.18.8-150200.3.28.2 |
jackson-dataformats-binarySUSE:Linux Enterprise Module for Development Tools 15 SP7 From an advisory covering 4 CVEs |
before 2.18.8-150200.3.21.3 | 2.18.8-150200.3.21.3 |
jackson-annotationsSUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS From an advisory covering 4 CVEs |
before 2.18.8-150200.3.22.3 | 2.18.8-150200.3.22.3 |
jackson-coreSUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS From an advisory covering 4 CVEs |
before 2.18.8-150200.3.22.3 | 2.18.8-150200.3.22.3 |
jackson-databindSUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS From an advisory covering 4 CVEs |
before 2.18.8-150200.3.28.2 | 2.18.8-150200.3.28.2 |
jackson-dataformats-binarySUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS From an advisory covering 4 CVEs |
before 2.18.8-150200.3.21.3 | 2.18.8-150200.3.21.3 |
jackson-annotationsSUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS From an advisory covering 4 CVEs |
before 2.18.8-150200.3.22.3 | 2.18.8-150200.3.22.3 |
jackson-coreSUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS From an advisory covering 4 CVEs |
before 2.18.8-150200.3.22.3 | 2.18.8-150200.3.22.3 |
jackson-databindSUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS From an advisory covering 4 CVEs |
before 2.18.8-150200.3.28.2 | 2.18.8-150200.3.28.2 |
jackson-dataformats-binarySUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS From an advisory covering 4 CVEs |
before 2.18.8-150200.3.21.3 | 2.18.8-150200.3.21.3 |
jackson-annotationsSUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS From an advisory covering 4 CVEs |
before 2.18.8-150200.3.22.3 | 2.18.8-150200.3.22.3 |
jackson-coreSUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS From an advisory covering 4 CVEs |
before 2.18.8-150200.3.22.3 | 2.18.8-150200.3.22.3 |
jackson-databindSUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS From an advisory covering 4 CVEs |
before 2.18.8-150200.3.28.2 | 2.18.8-150200.3.28.2 |
jackson-dataformats-binarySUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS From an advisory covering 4 CVEs |
before 2.18.8-150200.3.21.3 | 2.18.8-150200.3.21.3 |
jackson-annotationsSUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS From an advisory covering 4 CVEs |
before 2.18.8-150200.3.22.3 | 2.18.8-150200.3.22.3 |
jackson-coreSUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS From an advisory covering 4 CVEs |
before 2.18.8-150200.3.22.3 | 2.18.8-150200.3.22.3 |
jackson-databindSUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS From an advisory covering 4 CVEs |
before 2.18.8-150200.3.28.2 | 2.18.8-150200.3.28.2 |
jackson-dataformats-binarySUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS From an advisory covering 4 CVEs |
before 2.18.8-150200.3.21.3 | 2.18.8-150200.3.21.3 |
jackson-annotationsSUSE:Linux Enterprise Server 15 SP4-LTSS From an advisory covering 4 CVEs |
before 2.18.8-150200.3.22.3 | 2.18.8-150200.3.22.3 |
jackson-coreSUSE:Linux Enterprise Server 15 SP4-LTSS From an advisory covering 4 CVEs |
before 2.18.8-150200.3.22.3 | 2.18.8-150200.3.22.3 |
jackson-databindSUSE:Linux Enterprise Server 15 SP4-LTSS From an advisory covering 4 CVEs |
before 2.18.8-150200.3.28.2 | 2.18.8-150200.3.28.2 |
jackson-dataformats-binarySUSE:Linux Enterprise Server 15 SP4-LTSS From an advisory covering 4 CVEs |
before 2.18.8-150200.3.21.3 | 2.18.8-150200.3.21.3 |
jackson-annotationsSUSE:Linux Enterprise Server 15 SP5-LTSS From an advisory covering 4 CVEs |
before 2.18.8-150200.3.22.3 | 2.18.8-150200.3.22.3 |
jackson-coreSUSE:Linux Enterprise Server 15 SP5-LTSS From an advisory covering 4 CVEs |
before 2.18.8-150200.3.22.3 | 2.18.8-150200.3.22.3 |
jackson-databindSUSE:Linux Enterprise Server 15 SP5-LTSS From an advisory covering 4 CVEs |
before 2.18.8-150200.3.28.2 | 2.18.8-150200.3.28.2 |
jackson-dataformats-binarySUSE:Linux Enterprise Server 15 SP5-LTSS From an advisory covering 4 CVEs |
before 2.18.8-150200.3.21.3 | 2.18.8-150200.3.21.3 |
jackson-annotationsSUSE:Linux Enterprise Server 15 SP6-LTSS From an advisory covering 4 CVEs |
before 2.18.8-150200.3.22.3 | 2.18.8-150200.3.22.3 |
jackson-coreSUSE:Linux Enterprise Server 15 SP6-LTSS From an advisory covering 4 CVEs |
before 2.18.8-150200.3.22.3 | 2.18.8-150200.3.22.3 |
jackson-databindSUSE:Linux Enterprise Server 15 SP6-LTSS From an advisory covering 4 CVEs |
before 2.18.8-150200.3.28.2 | 2.18.8-150200.3.28.2 |
jackson-dataformats-binarySUSE:Linux Enterprise Server 15 SP6-LTSS From an advisory covering 4 CVEs |
before 2.18.8-150200.3.21.3 | 2.18.8-150200.3.21.3 |
jackson-annotationsSUSE:Linux Enterprise Server for SAP Applications 15 SP4 From an advisory covering 4 CVEs |
before 2.18.8-150200.3.22.3 | 2.18.8-150200.3.22.3 |
jackson-coreSUSE:Linux Enterprise Server for SAP Applications 15 SP4 From an advisory covering 4 CVEs |
before 2.18.8-150200.3.22.3 | 2.18.8-150200.3.22.3 |
jackson-databindSUSE:Linux Enterprise Server for SAP Applications 15 SP4 From an advisory covering 4 CVEs |
before 2.18.8-150200.3.28.2 | 2.18.8-150200.3.28.2 |
jackson-dataformats-binarySUSE:Linux Enterprise Server for SAP Applications 15 SP4 From an advisory covering 4 CVEs |
before 2.18.8-150200.3.21.3 | 2.18.8-150200.3.21.3 |
jackson-annotationsSUSE:Linux Enterprise Server for SAP Applications 15 SP5 From an advisory covering 4 CVEs |
before 2.18.8-150200.3.22.3 | 2.18.8-150200.3.22.3 |
jackson-coreSUSE:Linux Enterprise Server for SAP Applications 15 SP5 From an advisory covering 4 CVEs |
before 2.18.8-150200.3.22.3 | 2.18.8-150200.3.22.3 |
jackson-databindSUSE:Linux Enterprise Server for SAP Applications 15 SP5 From an advisory covering 4 CVEs |
before 2.18.8-150200.3.28.2 | 2.18.8-150200.3.28.2 |
jackson-dataformats-binarySUSE:Linux Enterprise Server for SAP Applications 15 SP5 From an advisory covering 4 CVEs |
before 2.18.8-150200.3.21.3 | 2.18.8-150200.3.21.3 |
jackson-annotationsSUSE:Linux Enterprise Server for SAP Applications 15 SP6 From an advisory covering 4 CVEs |
before 2.18.8-150200.3.22.3 | 2.18.8-150200.3.22.3 |
jackson-coreSUSE:Linux Enterprise Server for SAP Applications 15 SP6 From an advisory covering 4 CVEs |
before 2.18.8-150200.3.22.3 | 2.18.8-150200.3.22.3 |
jackson-databindSUSE:Linux Enterprise Server for SAP Applications 15 SP6 From an advisory covering 4 CVEs |
before 2.18.8-150200.3.28.2 | 2.18.8-150200.3.28.2 |
jackson-dataformats-binarySUSE:Linux Enterprise Server for SAP Applications 15 SP6 From an advisory covering 4 CVEs |
before 2.18.8-150200.3.21.3 | 2.18.8-150200.3.21.3 |
jackson-databindUbuntu:Pro:14.04:LTS |
All versions, plus listed versions 2.2.2-12.2.2-1ubuntu0.1~esm1 |
None known |
jackson-databindUbuntu:Pro:16.04:LTS |
All versions, plus listed versions 2.4.2-22.4.2-32.4.2-3ubuntu0.1~esm12.4.2-3ubuntu0.1~esm2 |
None known |
jackson-databindUbuntu:18.04:LTS |
All versions, plus listed versions 2.8.6-12.9.1-12.9.4-12.9.5-12.9.8-1~18.04 |
None known |
jackson-databindUbuntu:20.04:LTS |
All versions, plus listed versions 2.9.9.3-12.10.0-22.10.1-12.10.2-1 |
None known |
jackson-databindUbuntu:22.04:LTS |
All versions, plus listed versions 2.12.1-12.12.5-12.13.0-12.13.0-2 |
None known |
jackson-databindUbuntu:24.04:LTS |
All versions, plus listed versions 2.14.0-1 |
None known |
jackson-databindUbuntu:25.10 |
All versions, plus listed versions 2.14.0+ds-1 |
None known |
jackson-databindUbuntu:26.10 |
All versions, plus listed versions 2.14.0+ds-1build12.14.0+ds-2 |
None known |
jackson-databindUbuntu:26.04:LTS |
All versions, plus listed versions 2.14.0+ds-12.14.0+ds-1build1 |
None known |
jackson-databindopenSUSE:Tumbleweed From an advisory covering 3 CVEs |
before 2.18.8-1.1 | 2.18.8-1.1 |
jackson-annotationsopenSUSE:Leap 16.0 From an advisory covering 4 CVEs |
before 2.18.8-160000.1.1 | 2.18.8-160000.1.1 |
jackson-coreopenSUSE:Leap 16.0 From an advisory covering 4 CVEs |
before 2.18.8-160000.1.1 | 2.18.8-160000.1.1 |
jackson-databindopenSUSE:Leap 16.0 From an advisory covering 4 CVEs |
before 2.18.8-160000.1.1 | 2.18.8-160000.1.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected | OSV | |
| affected | ||
| facts | ||
| first indexed | CVE List, EUVD, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2026-54514 is a medium vulnerability (CVSS 5.3) in Fasterxml Jackson-databind, published June 23, 2026. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.37%, the 30th percentile. Fixed in com.fasterxml.jackson.core:jackson-databind 2.18.8.
References
github.com/FasterXML/jackson-databind/security/advisories/GHSA-hgj6-7826-r7m5
nvd.nist.gov/vuln/detail/CVE-2026-54514
errata.tuxcare.com/els_os/tuxcare9.6esu/CLSA-2026-1784135237.html
Show 103 moreShow less
security-tracker.debian.org/tracker/CVE-2026-54514
repo.maven.apache.org/maven2
security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-54513.json
access.redhat.com/errata/RHSA-2026:36839
suse.com/support/update/announcement/2026/suse-su-202622504-1
bugzilla.suse.com/1268603
ubuntu.com/security/CVE-2026-54514
cve.org/CVERecord?id=CVE-2026-54514
Left out here: 704 versions. The JSON record has them. Also not on the record: 21 aliases. ID and package lookups still check them. Left out on purpose, here and in the API, to keep responses small: 61 source records.