Every CVE Search/ Get API key

CVE-2026-54515

jackson-databind: Case-insensitive deserialization bypasses per-property @JsonIgnoreProperties

5.3 MediumPublic exploitFix available

jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor. From 2.8.0 until 2.18.9, 2.21.5, and 3.1.4, in BeanDeserializerBase.createContextual(), per-property @JsonIgnoreProperties exclusions are applied by _handleByNameInclusion(), producing a contextual deserializer whose BeanPropertyMap has the ignored properties removed. The subsequent per-property case-insensitivity block (triggered by @JsonFormat(ACCEPT_CASE_INSENSITIVE_PROPERTIES)) rebuilds from this._beanProperties (the original, unfiltered map) instead of contextual._beanProperties, then overwrites the filtered map — restoring every property _handleByNameInclusion had just removed. The ignored property becomes writable again. This vulnerability is fixed in 2.18.9, 2.21.5, and 3.1.4.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
None
User interaction
None

What an attacker can affect

Confidentiality
None
Integrity
Low
Availability
None

Exploit likelihood

0.44%Up 0.1 points since Jun 24, 2026
90%50%10%1%

What each source reports

CVE List Score used 5.3

jackson-databind: Case-insensitive deserialization bypasses per-property @JsonIgnoreProperties

jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor. From 2.8.0 until 2.18.9, 2.21.5, and 3.1.4, in BeanDeserializerBase.createContextual(), per-property @JsonIgnoreProperties exclusions are applied by _handleByNameInclusion(), producing a contextual deserializer whose BeanPropertyMap has the ignored properties removed. The subsequent per-property case-insensitivity block (triggered by @JsonFormat(ACCEPT_CASE_INSENSITIVE_PROPERTIES)) rebuilds from this._beanProperties (the original, unfiltered map) instead of contextual._beanProperties, then overwrites the filtered map — restoring every property _handleByNameInclusion had just removed. The ignored property becomes writable again. This vulnerability is fixed in 2.18.9, 2.21.5, and 3.1.4.

Record
CVE-2026-54515
CVSS 3.1
5.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Weakness
CWE-915
Updated
2026-11-02
EUVDEUVD-2026-38591 5.3

jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor. From 2.8.0 until 2.18.9, 2.21.5, and 3.1.4, in BeanDeserializerBase.createContextual(), per-property @JsonIgnoreProperties exclusions are applied by _handleByNameInclusion(), producing a contextual deserializer whose BeanPropertyMap has the ignored properties removed. The subsequent per-property case-insensitivity block (triggered by @JsonFormat(ACCEPT_CASE_INSENSITIVE_PROPERTIES)) rebuilds from this._beanProperties (the original, unfiltered map) instead of contextual._beanProperties, then overwrites the filtered map — restoring every property _handleByNameInclusion had just removed. The ignored property becomes writable again. This vulnerability is fixed in 2.18.9, 2.21.5, and 3.1.4.

Record
EUVD-2026-38591
CVSS 3.1
5.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Updated
2026-11-02
GitHub AdvisoriesGHSA-5jmj-h7xm-6q6v 5.3

jackson-databind has case-insensitive deserialization bypasses per-property @JsonIgnoreProperties

Summary

In BeanDeserializerBase.createContextual(), per-property @JsonIgnoreProperties exclusions are applied by _handleByNameInclusion(), producing a contextual deserializer whose BeanPropertyMap has the ignored properties removed. The subsequent per-property case-insensitivity block (triggered by @JsonFormat(ACCEPT_CASE_INSENSITIVE_PROPERTIES)) rebuilds from this._beanProperties (the original, unfiltered map) instead of contextual._beanProperties, then overwrites the filtered map — restoring every property _handleByNameInclusion had just removed. The ignored property becomes writable again.

Impact

An application that both enables case-insensitive matching and relies on per-property @JsonIgnoreProperties to keep a field unwritable can have that field set from untrusted JSON (mass-assignment-style write).

Affected / Patched

Will be fixed in 2.18.9, 2.21.5, 2.22.1 and 3.1.4.

Severity / CWE

Maintainer: minor. Reporter: Moderate. CWE-915.

Upstream fix

FasterXML/jackson-databind#5962 (PR #5964, 0e1b0b2), milestone 3.1.4. Released 2026-06-04.

Record
GHSA-5jmj-h7xm-6q6v
CVSS 3.1
5.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Weakness
CWE-915
Updated
2026-11-02
NVD 5.3

jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor. From 2.8.0 until 2.18.9, 2.21.5, and 3.1.4, in BeanDeserializerBase.createContextual(), per-property @JsonIgnoreProperties exclusions are applied by _handleByNameInclusion(), producing a contextual deserializer whose BeanPropertyMap has the ignored properties removed. The subsequent per-property case-insensitivity block (triggered by @JsonFormat(ACCEPT_CASE_INSENSITIVE_PROPERTIES)) rebuilds from this._beanProperties (the original, unfiltered map) instead of contextual._beanProperties, then overwrites the filtered map — restoring every property _handleByNameInclusion had just removed. The ignored property becomes writable again. This vulnerability is fixed in 2.18.9, 2.21.5, and 3.1.4.

Record
CVE-2026-54515
CVSS 3.1
5.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Weakness
CWE-915
Updated
2026-11-02
OSV 5.3

jackson-databind: Case-insensitive deserialization bypasses per-property @JsonIgnoreProperties

jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor. From 2.8.0 until 2.18.9, 2.21.5, and 3.1.4, in BeanDeserializerBase.createContextual(), per-property @JsonIgnoreProperties exclusions are applied by _handleByNameInclusion(), producing a contextual deserializer whose BeanPropertyMap has the ignored properties removed. The subsequent per-property case-insensitivity block (triggered by @JsonFormat(ACCEPT_CASE_INSENSITIVE_PROPERTIES)) rebuilds from this._beanProperties (the original, unfiltered map) instead of contextual._beanProperties, then overwrites the filtered map — restoring every property _handleByNameInclusion had just removed. The ignored property becomes writable again. This vulnerability is fixed in 2.18.9, 2.21.5, and 3.1.4.

Record
CVE-2026-54515
CVSS 3.1
5.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Weakness
CWE-915
Updated
2026-11-02
OSVDEBIAN-CVE-2026-54515 5.3

jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor. From 2.8.0 until 2.18.9, 2.21.5, and 3.1.4, in BeanDeserializerBase.createContextual(), per-property @JsonIgnoreProperties exclusions are applied by _handleByNameInclusion(), producing a contextual deserializer whose BeanPropertyMap has the ignored properties removed. The subsequent per-property case-insensitivity block (triggered by @JsonFormat(ACCEPT_CASE_INSENSITIVE_PROPERTIES)) rebuilds from this._beanProperties (the original, unfiltered map) instead of contextual._beanProperties, then overwrites the filtered map — restoring every property _handleByNameInclusion had just removed. The ignored property becomes writable again. This vulnerability is fixed in 2.18.9, 2.21.5, and 3.1.4.

Record
DEBIAN-CVE-2026-54515
CVSS 3.1
5.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Updated
2026-11-02
Show 48 moreShow less
OSVGHSA-5jmj-h7xm-6q6v 5.3

jackson-databind has case-insensitive deserialization bypasses per-property @JsonIgnoreProperties

Summary

In BeanDeserializerBase.createContextual(), per-property @JsonIgnoreProperties exclusions are applied by _handleByNameInclusion(), producing a contextual deserializer whose BeanPropertyMap has the ignored properties removed. The subsequent per-property case-insensitivity block (triggered by @JsonFormat(ACCEPT_CASE_INSENSITIVE_PROPERTIES)) rebuilds from this._beanProperties (the original, unfiltered map) instead of contextual._beanProperties, then overwrites the filtered map — restoring every property _handleByNameInclusion had just removed. The ignored property becomes writable again.

Impact

An application that both enables case-insensitive matching and relies on per-property @JsonIgnoreProperties to keep a field unwritable can have that field set from untrusted JSON (mass-assignment-style write).

Affected / Patched

Will be fixed in 2.18.9, 2.21.5, 2.22.1 and 3.1.4.

Severity / CWE

Maintainer: minor. Reporter: Moderate. CWE-915.

Upstream fix

FasterXML/jackson-databind#5962 (PR #5964, 0e1b0b2), milestone 3.1.4. Released 2026-06-04.

Record
GHSA-5jmj-h7xm-6q6v
CVSS 3.1
5.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Weakness
CWE-915
Updated
2026-11-02
OSVRHLW-2026-09128b29f89dc8ed 5.6

Lightwell Security Advisory: jackson-databind 2.17.3.rhlw-00013

Red Hat Lightwell has released com.fasterxml.jackson.core:jackson-databind 2.17.3.rhlw-00013 with backported fixes for CVE-2026-83557, CVE-2026-54512, CVE-2026-54515, CVE-2026-19032, CVE-2026-77310, CVE-2026-54514, CVE-2026-59888, and CVE-2026-54513.

CVE-2026-83557: jackson-databind omits java.lang.Comparable from DefaultBaseTypeLimitingValidator's unsafe base types

CVE-2026-54512: jackson-databind: PolymorphicTypeValidator bypass via generic type parameters allows arbitrary class instantiation

CVE-2026-54515: jackson-databind: Case-insensitive deserialization bypasses per-property @JsonIgnoreProperties

CVE-2026-19032: jackson-databind resolves attacker-controlled URI schemes when deserializing java.nio.file.Path

CVE-2026-77310: jackson-databind: Eager DNS resolution (SSRF) still present in InetAddress deserialization (Incomplete fix for CVE-2026-54514)

CVE-2026-54514: jackson-databind: InetSocketAddress deserialization triggers eager DNS resolution (SSRF)

CVE-2026-59888: jackson-databind: @JsonIgnore on a Record property is bypassed with a PropertyNamingStrategy

CVE-2026-54513: jackson-databind: Array subtype allowlist bypass in BasicPolymorphicTypeValidator (allowIfSubTypeIsArray)

This patched artifact is a drop-in replacement for com.fasterxml.jackson.core:jackson-databind 2.17.3 from Maven Central.

Record
RHLW-2026-09128b29f89dc8ed
CVSS 3.1
5.6 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L
Updated
2026-11-02
OSVRHLW-2026-804d65df1a73952a 5.3

Lightwell Security Advisory: jackson-databind 2.18.0.rhlw-00010

Red Hat Lightwell has released com.fasterxml.jackson.core:jackson-databind 2.18.0.rhlw-00010 with backported fixes for CVE-2026-19032, CVE-2026-54513, CVE-2026-54514, CVE-2026-54515, CVE-2026-59888, CVE-2026-59889, and CVE-2026-83557.

CVE-2026-19032: jackson-databind resolves attacker-controlled URI schemes when deserializing java.nio.file.Path

CVE-2026-54513: jackson-databind: Array subtype allowlist bypass in BasicPolymorphicTypeValidator (allowIfSubTypeIsArray)

CVE-2026-54514: jackson-databind: InetSocketAddress deserialization triggers eager DNS resolution (SSRF)

CVE-2026-54515: jackson-databind: Case-insensitive deserialization bypasses per-property @JsonIgnoreProperties

CVE-2026-59888: jackson-databind: @JsonIgnore on a Record property is bypassed with a PropertyNamingStrategy

CVE-2026-59889: jackson-databind: @JsonView ypassed for @JsonUnwrapped container properties on deserialization

CVE-2026-83557: jackson-databind omits java.lang.Comparable from DefaultBaseTypeLimitingValidator's unsafe base types

This patched artifact is a drop-in replacement for com.fasterxml.jackson.core:jackson-databind 2.18.0 from Maven Central.

Record
RHLW-2026-804d65df1a73952a
CVSS 3.1
5.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Updated
2026-11-02
OSVRHSA-2026:67604 8.2

Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4.25 security update

Record
RHSA-2026:67604
CVSS 3.1
8.2 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H
Updated
2026-11-02
OSVRHSA-2026:70228 8.8

Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 8.1.8 security update

Record
RHSA-2026:70228
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:70229 8.8

Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 8.1.8 security update

Record
RHSA-2026:70229
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:70230 8.8

Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 8.1.8 security update

Record
RHSA-2026:70230
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2026-54515 5.3

jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor. From 2.8.0 until 2.18.9, 2.21.5, and 3.1.4, in BeanDeserializerBase.createContextual(), per-property @JsonIgnoreProperties exclusions are applied by _handleByNameInclusion(), producing a contextual deserializer whose BeanPropertyMap has the ignored properties removed. The subsequent per-property case-insensitivity block (triggered by @JsonFormat(ACCEPT_CASE_INSENSITIVE_PROPERTIES)) rebuilds from this._beanProperties (the original, unfiltered map) instead of contextual._beanProperties, then overwrites the filtered map — restoring every property _handleByNameInclusion had just removed. The ignored property becomes writable again. This vulnerability is fixed in 2.18.9, 2.21.5, and 3.1.4.

Record
UBUNTU-CVE-2026-54515
CVSS 3.1
5.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Updated
2026-11-02
OSVCLSA-2026-1788348298 No score

TuxCare security update for com.fasterxml.jackson.core:jackson-databind (3 CVEs)

TuxCare rebuilt com.fasterxml.jackson.core:jackson-databind to address 3 CVEs. Fixed in 2.14.2-tuxcare.2.

Record
CLSA-2026-1788348298
Updated
2026-11-02
OSVCLSA-2026-1788358728 No score

TuxCare security update for com.fasterxml.jackson.core:jackson-databind (5 CVEs)

TuxCare rebuilt com.fasterxml.jackson.core:jackson-databind to address 5 CVEs. Fixed in 2.14.1-tuxcare.1.

Record
CLSA-2026-1788358728
Updated
2026-11-02
OSVCLSA-2026-1789494210 No score

TuxCare security update for com.fasterxml.jackson.core:jackson-databind (9 CVEs)

TuxCare rebuilt com.fasterxml.jackson.core:jackson-databind to address 9 CVEs. Fixed in 2.17.2-tuxcare.1.

Record
CLSA-2026-1789494210
Updated
2026-11-02
OSVCLSA-2026-1791487635 No score

TuxCare security update for com.fasterxml.jackson.core:jackson-databind (9 CVEs)

TuxCare rebuilt com.fasterxml.jackson.core:jackson-databind to address 9 CVEs. Fixed in 2.17.3-tuxcare.3.

Record
CLSA-2026-1791487635
Updated
2026-11-02
OSVCLSA-2026-1791530917 No score

TuxCare security update for com.fasterxml.jackson.core:jackson-databind (8 CVEs)

TuxCare rebuilt com.fasterxml.jackson.core:jackson-databind to address 8 CVEs. Fixed in 2.8.11-tuxcare.1.

Record
CLSA-2026-1791530917
Updated
2026-11-02
OSVCLSA-2026-1791531441 No score

TuxCare security update for com.fasterxml.jackson.core:jackson-databind (9 CVEs)

TuxCare rebuilt com.fasterxml.jackson.core:jackson-databind to address 9 CVEs. Fixed in 2.11.3-tuxcare.1.

Record
CLSA-2026-1791531441
Updated
2026-11-02
OSVCLSA-2026-1791531494 No score

TuxCare security update for com.fasterxml.jackson.core:jackson-databind (10 CVEs)

TuxCare rebuilt com.fasterxml.jackson.core:jackson-databind to address 10 CVEs. Fixed in 2.9.10.3-tuxcare.1.

Record
CLSA-2026-1791531494
Updated
2026-11-02
OSVCLSA-2026-1791781917 No score

TuxCare security update for com.fasterxml.jackson.core:jackson-databind (9 CVEs)

TuxCare rebuilt com.fasterxml.jackson.core:jackson-databind to address 9 CVEs. Fixed in 2.13.4.2-tuxcare.1.

Record
CLSA-2026-1791781917
Updated
2026-11-02
OSVCLSA-2026-1792440931 No score

TuxCare security update for com.fasterxml.jackson.core:jackson-databind (9 CVEs)

TuxCare rebuilt com.fasterxml.jackson.core:jackson-databind to address 9 CVEs. Fixed in 2.9.9.3-tuxcare.1.

Record
CLSA-2026-1792440931
Updated
2026-11-02
OSVCLSA-2026-1792441007 No score

TuxCare security update for com.fasterxml.jackson.core:jackson-databind (9 CVEs)

TuxCare rebuilt com.fasterxml.jackson.core:jackson-databind to address 9 CVEs. Fixed in 2.15.0-tuxcare.1.

Record
CLSA-2026-1792441007
Updated
2026-11-02
OSVCLSA-2026-1792441009 No score

TuxCare security update for com.fasterxml.jackson.core:jackson-databind (10 CVEs)

TuxCare rebuilt com.fasterxml.jackson.core:jackson-databind to address 10 CVEs. Fixed in 2.13.4-tuxcare.1.

Record
CLSA-2026-1792441009
Updated
2026-11-02
OSVCLSA-2026-1792441036 No score

TuxCare security update for com.fasterxml.jackson.core:jackson-databind (9 CVEs)

TuxCare rebuilt com.fasterxml.jackson.core:jackson-databind to address 9 CVEs. Fixed in 2.9.9-tuxcare.1.

Record
CLSA-2026-1792441036
Updated
2026-11-02
OSVCLSA-2026-1792441055 No score

TuxCare security update for com.fasterxml.jackson.core:jackson-databind (9 CVEs)

TuxCare rebuilt com.fasterxml.jackson.core:jackson-databind to address 9 CVEs. Fixed in 2.9.9.1-tuxcare.1.

Record
CLSA-2026-1792441055
Updated
2026-11-02
OSVCLSA-2026-1792441073 No score

TuxCare security update for com.fasterxml.jackson.core:jackson-databind (9 CVEs)

TuxCare rebuilt com.fasterxml.jackson.core:jackson-databind to address 9 CVEs. Fixed in 2.13.3-tuxcare.1.

Record
CLSA-2026-1792441073
Updated
2026-11-02
OSVCLSA-2026-1792441154 No score

TuxCare security update for com.fasterxml.jackson.core:jackson-databind (10 CVEs)

TuxCare rebuilt com.fasterxml.jackson.core:jackson-databind to address 10 CVEs. Fixed in 2.9.10.4-tuxcare.1.

Record
CLSA-2026-1792441154
Updated
2026-11-02
OSVCLSA-2026-1792441195 No score

TuxCare security update for com.fasterxml.jackson.core:jackson-databind (9 CVEs)

TuxCare rebuilt com.fasterxml.jackson.core:jackson-databind to address 9 CVEs. Fixed in 2.9.8-tuxcare.1.

Record
CLSA-2026-1792441195
Updated
2026-11-02
OSVCLSA-2026-1792441222 No score

TuxCare security update for com.fasterxml.jackson.core:jackson-databind (9 CVEs)

TuxCare rebuilt com.fasterxml.jackson.core:jackson-databind to address 9 CVEs. Fixed in 2.9.10.1-tuxcare.1.

Record
CLSA-2026-1792441222
Updated
2026-11-02
OSVCLSA-2026-1792441229 No score

TuxCare security update for com.fasterxml.jackson.core:jackson-databind (7 CVEs)

TuxCare rebuilt com.fasterxml.jackson.core:jackson-databind to address 7 CVEs. Fixed in 2.14.3-tuxcare.1.

Record
CLSA-2026-1792441229
Updated
2026-11-02
OSVCLSA-2026-1792441360 No score

TuxCare security update for com.fasterxml.jackson.core:jackson-databind (7 CVEs)

TuxCare rebuilt com.fasterxml.jackson.core:jackson-databind to address 7 CVEs. Fixed in 2.9.10-tuxcare.1.

Record
CLSA-2026-1792441360
Updated
2026-11-02
OSVCLSA-2026-1792441426 No score

TuxCare security update for com.fasterxml.jackson.core:jackson-databind (6 CVEs)

TuxCare rebuilt com.fasterxml.jackson.core:jackson-databind to address 6 CVEs. Fixed in 2.15.4-tuxcare.1.

Record
CLSA-2026-1792441426
Updated
2026-11-02
OSVCLSA-2026-1792441448 No score

TuxCare security update for com.fasterxml.jackson.core:jackson-databind (6 CVEs)

TuxCare rebuilt com.fasterxml.jackson.core:jackson-databind to address 6 CVEs. Fixed in 2.15.3-tuxcare.1.

Record
CLSA-2026-1792441448
Updated
2026-11-02
OSVCLSA-2026-1792441542 No score

TuxCare security update for com.fasterxml.jackson.core:jackson-databind (7 CVEs)

TuxCare rebuilt com.fasterxml.jackson.core:jackson-databind to address 7 CVEs. Fixed in 2.12.1-tuxcare.2.

Record
CLSA-2026-1792441542
Updated
2026-11-02
OSVCLSA-2026-1792441664 No score

TuxCare security update for com.fasterxml.jackson.core:jackson-databind (6 CVEs)

TuxCare rebuilt com.fasterxml.jackson.core:jackson-databind to address 6 CVEs. Fixed in 2.15.2-tuxcare.1.

Record
CLSA-2026-1792441664
Updated
2026-11-02
OSVCLSA-2026-1792441729 No score

TuxCare security update for com.fasterxml.jackson.core:jackson-databind (5 CVEs)

TuxCare rebuilt com.fasterxml.jackson.core:jackson-databind to address 5 CVEs. Fixed in 2.21.4-tuxcare.1.

Record
CLSA-2026-1792441729
Updated
2026-11-02
OSVCLSA-2026-1792441755 No score

TuxCare security update for com.fasterxml.jackson.core:jackson-databind (8 CVEs)

TuxCare rebuilt com.fasterxml.jackson.core:jackson-databind to address 8 CVEs. Fixed in 2.18.5-tuxcare.1.

Record
CLSA-2026-1792441755
Updated
2026-11-02
OSVCLSA-2026-1792441770 No score

TuxCare security update for com.fasterxml.jackson.core:jackson-databind (10 CVEs)

TuxCare rebuilt com.fasterxml.jackson.core:jackson-databind to address 10 CVEs. Fixed in 2.11.4-tuxcare.1.

Record
CLSA-2026-1792441770
Updated
2026-11-02
OSVCLSA-2026-1792441919 No score

TuxCare security update for com.fasterxml.jackson.core:jackson-databind (5 CVEs)

TuxCare rebuilt com.fasterxml.jackson.core:jackson-databind to address 5 CVEs. Fixed in 2.18.8-tuxcare.1.

Record
CLSA-2026-1792441919
Updated
2026-11-02
OSVCLSA-2026-1792474422 No score

TuxCare security update for com.fasterxml.jackson.core:jackson-databind (11 CVEs)

TuxCare rebuilt com.fasterxml.jackson.core:jackson-databind to address 11 CVEs. Fixed in 2.11.2-tuxcare.1.

Record
CLSA-2026-1792474422
Updated
2026-11-02
OSVCLSA-2026-1792474453 No score

TuxCare security update for com.fasterxml.jackson.core:jackson-databind (20 CVEs)

TuxCare rebuilt com.fasterxml.jackson.core:jackson-databind to address 20 CVEs. Fixed in 2.9.10.5-tuxcare.1.

Record
CLSA-2026-1792474453
Updated
2026-11-02
OSVCLSA-2026-1792475167 No score

TuxCare security update for com.fasterxml.jackson.core:jackson-databind (6 CVEs)

TuxCare rebuilt com.fasterxml.jackson.core:jackson-databind to address 6 CVEs. Fixed in 2.16.1-tuxcare.1.

Record
CLSA-2026-1792475167
Updated
2026-11-02
OSVCLSA-2026-1792478714 No score

TuxCare security update for com.fasterxml.jackson.core:jackson-databind (9 CVEs)

TuxCare rebuilt com.fasterxml.jackson.core:jackson-databind to address 9 CVEs. Fixed in 2.13.5-tuxcare.1.

Record
CLSA-2026-1792478714
Updated
2026-11-02
OSVCLSA-2026-1792479593 No score

TuxCare security update for com.fasterxml.jackson.core:jackson-databind (7 CVEs)

TuxCare rebuilt com.fasterxml.jackson.core:jackson-databind to address 7 CVEs. Fixed in 2.19.2-tuxcare.1.

Record
CLSA-2026-1792479593
Updated
2026-11-02
OSVCLSA-2026-1792479645 No score

TuxCare security update for com.fasterxml.jackson.core:jackson-databind (7 CVEs)

TuxCare rebuilt com.fasterxml.jackson.core:jackson-databind to address 7 CVEs. Fixed in 2.19.4-tuxcare.1.

Record
CLSA-2026-1792479645
Updated
2026-11-02
OSVCLSA-2026-1792479649 No score

TuxCare security update for com.fasterxml.jackson.core:jackson-databind (7 CVEs)

TuxCare rebuilt com.fasterxml.jackson.core:jackson-databind to address 7 CVEs. Fixed in 2.19.0-tuxcare.1.

Record
CLSA-2026-1792479649
Updated
2026-11-02
OSVCLSA-2026-1792479685 No score

TuxCare security update for com.fasterxml.jackson.core:jackson-databind (8 CVEs)

TuxCare rebuilt com.fasterxml.jackson.core:jackson-databind to address 8 CVEs. Fixed in 2.20.1-tuxcare.1.

Record
CLSA-2026-1792479685
Updated
2026-11-02
OSVCLSA-2026-1792511689 No score

TuxCare security update for com.fasterxml.jackson.core:jackson-databind (8 CVEs)

TuxCare rebuilt com.fasterxml.jackson.core:jackson-databind to address 8 CVEs. Fixed in 2.8.11.3-tuxcare.1.

Record
CLSA-2026-1792511689
Updated
2026-11-02
OSVCLSA-2026-1792511694 No score

TuxCare security update for com.fasterxml.jackson.core:jackson-databind (8 CVEs)

TuxCare rebuilt com.fasterxml.jackson.core:jackson-databind to address 8 CVEs. Fixed in 2.8.10-tuxcare.1.

Record
CLSA-2026-1792511694
Updated
2026-11-02
OSVCLSA-2026-1792511697 No score

TuxCare security update for com.fasterxml.jackson.core:jackson-databind (8 CVEs)

TuxCare rebuilt com.fasterxml.jackson.core:jackson-databind to address 8 CVEs. Fixed in 2.8.5-tuxcare.1.

Record
CLSA-2026-1792511697
Updated
2026-11-02
OSVCLSA-2026-1792511699 No score

TuxCare security update for com.fasterxml.jackson.core:jackson-databind (8 CVEs)

TuxCare rebuilt com.fasterxml.jackson.core:jackson-databind to address 8 CVEs. Fixed in 2.8.11.1-tuxcare.1.

Record
CLSA-2026-1792511699
Updated
2026-11-02
OSVCLSA-2026-1792511878 No score

TuxCare security update for com.fasterxml.jackson.core:jackson-databind (8 CVEs)

TuxCare rebuilt com.fasterxml.jackson.core:jackson-databind to address 8 CVEs. Fixed in 2.8.7-tuxcare.1.

Record
CLSA-2026-1792511878
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
com.fasterxml.jackson.core:jackson-databind
Maven
 3.1.0 up to 3.1.4
3.1.4
tools.jackson.core:jackson-databind
Maven
 3.1.0 up to 3.1.4
3.1.4
com.fasterxml.jackson.core:jackson-databind
Maven
 2.8.0 up to 2.18.9
2.18.9
com.fasterxml.jackson.core:jackson-databind
Maven
 2.19.0 up to 2.21.5
2.21.5
com.fasterxml.jackson.core:jackson-databind
Maven
 2.22.0 up to 2.22.1
2.22.1
com.fasterxml.jackson.core:jackson-databind
TuxCare:Maven
From an advisory covering 3 CVEs
 2.14.2 up to 2.14.2-tuxcare.2, plus listed versions
2.14.2-tuxcare.1
2.14.2-tuxcare.2
com.fasterxml.jackson.core:jackson-databind
TuxCare:Maven
From an advisory covering 5 CVEs
 2.14.1 up to 2.14.1-tuxcare.1
2.14.1-tuxcare.1
com.fasterxml.jackson.core:jackson-databind
TuxCare:Maven
From an advisory covering 8 CVEs
 2.17.2 up to 2.17.2-tuxcare.1
2.17.2-tuxcare.1
com.fasterxml.jackson.core:jackson-databind
TuxCare:Maven
From an advisory covering 8 CVEs
 2.17.3 up to 2.17.3-tuxcare.3, plus listed versions
2.17.3-tuxcare.12.17.3-tuxcare.2
2.17.3-tuxcare.3
com.fasterxml.jackson.core:jackson-databind
TuxCare:Maven
From an advisory covering 7 CVEs
 2.8.11 up to 2.8.11-tuxcare.1
2.8.11-tuxcare.1
Show 290 moreShow less
Affected packages
PackageAffectedFixed
com.fasterxml.jackson.core:jackson-databind
TuxCare:Maven
From an advisory covering 8 CVEs
 2.11.3 up to 2.11.3-tuxcare.1
2.11.3-tuxcare.1
com.fasterxml.jackson.core:jackson-databind
TuxCare:Maven
From an advisory covering 9 CVEs
 2.9.10.3 up to 2.9.10.3-tuxcare.1
2.9.10.3-tuxcare.1
com.fasterxml.jackson.core:jackson-databind
TuxCare:Maven
From an advisory covering 8 CVEs
 2.13.4.2 up to 2.13.4.2-tuxcare.1
2.13.4.2-tuxcare.1
com.fasterxml.jackson.core:jackson-databind
TuxCare:Maven
From an advisory covering 8 CVEs
 2.9.9.3 up to 2.9.9.3-tuxcare.1
2.9.9.3-tuxcare.1
com.fasterxml.jackson.core:jackson-databind
TuxCare:Maven
From an advisory covering 8 CVEs
 2.15.0 up to 2.15.0-tuxcare.1
2.15.0-tuxcare.1
com.fasterxml.jackson.core:jackson-databind
TuxCare:Maven
From an advisory covering 9 CVEs
 2.13.4 up to 2.13.4-tuxcare.1
2.13.4-tuxcare.1
com.fasterxml.jackson.core:jackson-databind
TuxCare:Maven
From an advisory covering 8 CVEs
 2.9.9 up to 2.9.9-tuxcare.1
2.9.9-tuxcare.1
com.fasterxml.jackson.core:jackson-databind
TuxCare:Maven
From an advisory covering 8 CVEs
 2.9.9.1 up to 2.9.9.1-tuxcare.1
2.9.9.1-tuxcare.1
com.fasterxml.jackson.core:jackson-databind
TuxCare:Maven
From an advisory covering 8 CVEs
 2.13.3 up to 2.13.3-tuxcare.1
2.13.3-tuxcare.1
com.fasterxml.jackson.core:jackson-databind
TuxCare:Maven
From an advisory covering 9 CVEs
 2.9.10.4 up to 2.9.10.4-tuxcare.1
2.9.10.4-tuxcare.1
com.fasterxml.jackson.core:jackson-databind
TuxCare:Maven
From an advisory covering 8 CVEs
 2.9.8 up to 2.9.8-tuxcare.1
2.9.8-tuxcare.1
com.fasterxml.jackson.core:jackson-databind
TuxCare:Maven
From an advisory covering 8 CVEs
 2.9.10.1 up to 2.9.10.1-tuxcare.1
2.9.10.1-tuxcare.1
com.fasterxml.jackson.core:jackson-databind
TuxCare:Maven
From an advisory covering 6 CVEs
 2.14.3 up to 2.14.3-tuxcare.1
2.14.3-tuxcare.1
com.fasterxml.jackson.core:jackson-databind
TuxCare:Maven
From an advisory covering 6 CVEs
 2.9.10 up to 2.9.10-tuxcare.1
2.9.10-tuxcare.1
com.fasterxml.jackson.core:jackson-databind
TuxCare:Maven
From an advisory covering 6 CVEs
 2.15.4 up to 2.15.4-tuxcare.1
2.15.4-tuxcare.1
com.fasterxml.jackson.core:jackson-databind
TuxCare:Maven
From an advisory covering 6 CVEs
 2.15.3 up to 2.15.3-tuxcare.1
2.15.3-tuxcare.1
com.fasterxml.jackson.core:jackson-databind
TuxCare:Maven
From an advisory covering 6 CVEs
 2.12.1 up to 2.12.1-tuxcare.2, plus listed versions
2.12.1-tuxcare.1
2.12.1-tuxcare.2
com.fasterxml.jackson.core:jackson-databind
TuxCare:Maven
From an advisory covering 6 CVEs
 2.15.2 up to 2.15.2-tuxcare.1
2.15.2-tuxcare.1
com.fasterxml.jackson.core:jackson-databind
TuxCare:Maven
From an advisory covering 4 CVEs
 2.21.4 up to 2.21.4-tuxcare.1
2.21.4-tuxcare.1
com.fasterxml.jackson.core:jackson-databind
TuxCare:Maven
From an advisory covering 7 CVEs
 2.18.5 up to 2.18.5-tuxcare.1
2.18.5-tuxcare.1
com.fasterxml.jackson.core:jackson-databind
TuxCare:Maven
From an advisory covering 9 CVEs
 2.11.4 up to 2.11.4-tuxcare.1
2.11.4-tuxcare.1
com.fasterxml.jackson.core:jackson-databind
TuxCare:Maven
From an advisory covering 4 CVEs
 2.18.8 up to 2.18.8-tuxcare.1
2.18.8-tuxcare.1
com.fasterxml.jackson.core:jackson-databind
TuxCare:Maven
From an advisory covering 10 CVEs
 2.11.2 up to 2.11.2-tuxcare.1
2.11.2-tuxcare.1
com.fasterxml.jackson.core:jackson-databind
TuxCare:Maven
From an advisory covering 19 CVEs
 2.9.10.5 up to 2.9.10.5-tuxcare.1
2.9.10.5-tuxcare.1
com.fasterxml.jackson.core:jackson-databind
TuxCare:Maven
From an advisory covering 6 CVEs
 2.16.1 up to 2.16.1-tuxcare.1
2.16.1-tuxcare.1
com.fasterxml.jackson.core:jackson-databind
TuxCare:Maven
From an advisory covering 8 CVEs
 2.13.5 up to 2.13.5-tuxcare.1
2.13.5-tuxcare.1
com.fasterxml.jackson.core:jackson-databind
TuxCare:Maven
From an advisory covering 6 CVEs
 2.19.2 up to 2.19.2-tuxcare.1
2.19.2-tuxcare.1
com.fasterxml.jackson.core:jackson-databind
TuxCare:Maven
From an advisory covering 6 CVEs
 2.19.4 up to 2.19.4-tuxcare.1
2.19.4-tuxcare.1
com.fasterxml.jackson.core:jackson-databind
TuxCare:Maven
From an advisory covering 6 CVEs
 2.19.0 up to 2.19.0-tuxcare.1
2.19.0-tuxcare.1
com.fasterxml.jackson.core:jackson-databind
TuxCare:Maven
From an advisory covering 7 CVEs
 2.20.1 up to 2.20.1-tuxcare.1
2.20.1-tuxcare.1
com.fasterxml.jackson.core:jackson-databind
TuxCare:Maven
From an advisory covering 7 CVEs
 2.8.11.3 up to 2.8.11.3-tuxcare.1
2.8.11.3-tuxcare.1
com.fasterxml.jackson.core:jackson-databind
TuxCare:Maven
From an advisory covering 7 CVEs
 2.8.10 up to 2.8.10-tuxcare.1
2.8.10-tuxcare.1
com.fasterxml.jackson.core:jackson-databind
TuxCare:Maven
From an advisory covering 7 CVEs
 2.8.5 up to 2.8.5-tuxcare.1
2.8.5-tuxcare.1
com.fasterxml.jackson.core:jackson-databind
TuxCare:Maven
From an advisory covering 7 CVEs
 2.8.11.1 up to 2.8.11.1-tuxcare.1
2.8.11.1-tuxcare.1
com.fasterxml.jackson.core:jackson-databind
TuxCare:Maven
From an advisory covering 7 CVEs
 2.8.7 up to 2.8.7-tuxcare.1
2.8.7-tuxcare.1
com.fasterxml.jackson.core:jackson-databind
TuxCare:Maven
From an advisory covering 7 CVEs
 2.8.11.4 up to 2.8.11.4-tuxcare.1
2.8.11.4-tuxcare.1
com.fasterxml.jackson.core:jackson-databind
TuxCare:Maven
From an advisory covering 7 CVEs
 2.8.4 up to 2.8.4-tuxcare.1
2.8.4-tuxcare.1
com.fasterxml.jackson.core:jackson-databind
TuxCare:Maven
From an advisory covering 6 CVEs
 2.9.3 up to 2.9.3-tuxcare.1
2.9.3-tuxcare.1
com.fasterxml.jackson.core:jackson-databind
TuxCare:Maven
From an advisory covering 7 CVEs
 2.9.1 up to 2.9.1-tuxcare.1
2.9.1-tuxcare.1
com.fasterxml.jackson.core:jackson-databind
TuxCare:Maven
From an advisory covering 7 CVEs
 2.9.7 up to 2.9.7-tuxcare.1
2.9.7-tuxcare.1
com.fasterxml.jackson.core:jackson-databind
TuxCare:Maven
From an advisory covering 7 CVEs
 2.9.2 up to 2.9.2-tuxcare.1
2.9.2-tuxcare.1
com.fasterxml.jackson.core:jackson-databind
TuxCare:Maven
From an advisory covering 7 CVEs
 2.9.5 up to 2.9.5-tuxcare.1
2.9.5-tuxcare.1
com.fasterxml.jackson.core:jackson-databind
TuxCare:Maven
From an advisory covering 7 CVEs
 2.9.4 up to 2.9.4-tuxcare.1
2.9.4-tuxcare.1
com.fasterxml.jackson.core:jackson-databind
TuxCare:Maven
From an advisory covering 5 CVEs
 2.16.0 up to 2.16.0-tuxcare.1
2.16.0-tuxcare.1
com.fasterxml.jackson.core:jackson-databind
TuxCare:Maven
From an advisory covering 7 CVEs
 2.16.2 up to 2.16.2-tuxcare.1
2.16.2-tuxcare.1
com.fasterxml.jackson.core:jackson-databind
TuxCare:Maven
From an advisory covering 6 CVEs
 2.15.1 up to 2.15.1-tuxcare.1
2.15.1-tuxcare.1
com.fasterxml.jackson.core:jackson-databind
TuxCare:Maven
 2.10.4 up to 2.10.4-tuxcare.2, plus listed versions
2.10.4-tuxcare.1
2.10.4-tuxcare.2
com.fasterxml.jackson.core:jackson-databind
TuxCare:Maven
From an advisory covering 5 CVEs
 2.18.4 up to 2.18.4-tuxcare.2, plus listed versions
2.18.4-tuxcare.1
2.18.4-tuxcare.2
com.fasterxml.jackson.core:jackson-databind
TuxCare:Maven
From an advisory covering 4 CVEs
 2.10.5.1 up to 2.10.5.1-tuxcare.2, plus listed versions
2.10.5.1-tuxcare.1
2.10.5.1-tuxcare.2
com.fasterxml.jackson.core:jackson-databind
TuxCare:Maven
From an advisory covering 7 CVEs
 2.21.2 up to 2.21.2-tuxcare.1
2.21.2-tuxcare.1
com.fasterxml.jackson.core:jackson-databind
TuxCare:Maven
From an advisory covering 4 CVEs
 2.11.1 up to 2.11.1-tuxcare.3, plus listed versions
2.11.1-tuxcare.12.11.1-tuxcare.2
2.11.1-tuxcare.3
com.fasterxml.jackson.core:jackson-databind
TuxCare:Maven
From an advisory covering 5 CVEs
 2.12.4 up to 2.12.4-tuxcare.2, plus listed versions
2.12.4-tuxcare.1
2.12.4-tuxcare.2
com.fasterxml.jackson.core:jackson-databind
TuxCare:Maven
From an advisory covering 3 CVEs
 2.12.7.1 up to 2.12.7.1-tuxcare.3, plus listed versions
2.12.7.1-tuxcare.12.12.7.1-tuxcare.2
2.12.7.1-tuxcare.3
com.fasterxml.jackson.core:jackson-databind
TuxCare:Maven
From an advisory covering 4 CVEs
 2.13.2.2 up to 2.13.2.2-tuxcare.2, plus listed versions
2.13.2.2-tuxcare.1
2.13.2.2-tuxcare.2
com.fasterxml.jackson.core:jackson-databind
TuxCare:Maven
From an advisory covering 3 CVEs
 2.17.1 up to 2.17.1-tuxcare.3, plus listed versions
2.17.1-tuxcare.12.17.1-tuxcare.2
2.17.1-tuxcare.3
com.fasterxml.jackson.core:jackson-databind
TuxCare:Maven
From an advisory covering 4 CVEs
 2.11.0 up to 2.11.0-tuxcare.2, plus listed versions
2.11.0-tuxcare.1
2.11.0-tuxcare.2
com.fasterxml.jackson.core:jackson-databind
TuxCare:Maven
From an advisory covering 3 CVEs
 2.9.10.8 up to 2.9.10.8-tuxcare.2, plus listed versions
2.9.10.8-tuxcare.1
2.9.10.8-tuxcare.2
com.fasterxml.jackson.core:jackson-databind
TuxCare:Maven
From an advisory covering 4 CVEs
 2.10.2 up to 2.10.2-tuxcare.2, plus listed versions
2.10.2-tuxcare.1
2.10.2-tuxcare.2
com.fasterxml.jackson.core:jackson-databind
TuxCare:Maven
From an advisory covering 3 CVEs
 2.13.0 up to 2.13.0-tuxcare.2, plus listed versions
2.13.0-tuxcare.1
2.13.0-tuxcare.2
com.fasterxml.jackson.core:jackson-databind
TuxCare:Maven
From an advisory covering 4 CVEs
 2.10.3 up to 2.10.3-tuxcare.2, plus listed versions
2.10.3-tuxcare.1
2.10.3-tuxcare.2
com.fasterxml.jackson.core:jackson-databind
TuxCare:Maven
From an advisory covering 7 CVEs
 2.12.6.1 up to 2.12.6.1-tuxcare.3, plus listed versions
2.12.6.1-tuxcare.12.12.6.1-tuxcare.2
2.12.6.1-tuxcare.3
com.fasterxml.jackson.core:jackson-databind
TuxCare:Maven
From an advisory covering 10 CVEs
 2.12.6 up to 2.12.6-tuxcare.2, plus listed versions
2.12.6-tuxcare.1
2.12.6-tuxcare.2
com.fasterxml.jackson.core:jackson-databind
TuxCare:Maven
From an advisory covering 6 CVEs
 2.12.7 up to 2.12.7-tuxcare.3, plus listed versions
2.12.7-tuxcare.12.12.7-tuxcare.2
2.12.7-tuxcare.3
tools.jackson.core:jackson-databind
TuxCare:Maven
From an advisory covering 6 CVEs
 3.1.2 up to 3.1.2-tuxcare.1
3.1.2-tuxcare.1
com.fasterxml.jackson.core:jackson-databind
TuxCare:Maven
From an advisory covering 4 CVEs
 2.9.10.7 up to 2.9.10.7-tuxcare.3, plus listed versions
2.9.10.7-tuxcare.12.9.10.7-tuxcare.2
2.9.10.7-tuxcare.3
com.fasterxml.jackson.core:jackson-databind
TuxCare:Maven
From an advisory covering 4 CVEs
 2.18.3 up to 2.18.3-tuxcare.3, plus listed versions
2.18.3-tuxcare.12.18.3-tuxcare.2
2.18.3-tuxcare.3
com.fasterxml.jackson.core:jackson-databind
TuxCare:Maven
From an advisory covering 4 CVEs
 2.13.1 up to 2.13.1-tuxcare.3, plus listed versions
2.13.1-tuxcare.12.13.1-tuxcare.2
2.13.1-tuxcare.3
com.fasterxml.jackson.core:jackson-databind
TuxCare:Maven
From an advisory covering 7 CVEs
 2.18.0 up to 2.18.0-tuxcare.3, plus listed versions
2.18.0-tuxcare.12.18.0-tuxcare.2
2.18.0-tuxcare.3
com.fasterxml.jackson.core:jackson-databind
TuxCare:Maven
From an advisory covering 6 CVEs
 2.18.2 up to 2.18.2-tuxcare.2, plus listed versions
2.18.2-tuxcare.1
2.18.2-tuxcare.2
com.fasterxml.jackson.core:jackson-databind
TuxCare:Maven
From an advisory covering 10 CVEs
 2.12.2 up to 2.12.2-tuxcare.3, plus listed versions
2.12.2-tuxcare.12.12.2-tuxcare.2
2.12.2-tuxcare.3
com.fasterxml.jackson.core:jackson-databind
TuxCare:Maven
From an advisory covering 6 CVEs
 2.17.0 up to 2.17.0-tuxcare.2, plus listed versions
2.17.0-tuxcare.1
2.17.0-tuxcare.2
com.fasterxml.jackson.core:jackson-databind
TuxCare:Maven
From an advisory covering 5 CVEs
 2.12.5 up to 2.12.5-tuxcare.3, plus listed versions
2.12.5-tuxcare.12.12.5-tuxcare.2
2.12.5-tuxcare.3
com.fasterxml.jackson.core:jackson-databind
TuxCare:Maven
From an advisory covering 10 CVEs
 2.9.10.6 up to 2.9.10.6-tuxcare.2, plus listed versions
2.9.10.6-tuxcare.1
2.9.10.6-tuxcare.2
jackson-databind
Debian:12
 All versions, plus listed versions
2.14.0+ds-12.14.0+ds-22.14.0+ds-32.14.0-12.14.0-1+deb12u12.18.11-12.22.4-1
 None known
jackson-databind
Debian:13
 All versions, plus listed versions
2.14.0+ds-12.14.0+ds-1+deb13u12.14.0+ds-22.14.0+ds-32.18.11-12.22.4-1
 None known
jackson-databind
Debian:14
 before 2.18.11-1, plus listed versions
2.14.0+ds-12.14.0+ds-22.14.0+ds-3
2.18.11-1
tools.jackson.core:jackson-databind
Maven
 3.1.0 up to 3.1.4, plus listed versions
3.1.13.1.23.1.3
3.1.4
com.fasterxml.jackson.core:jackson-databind
Maven
 2.8.0 up to 2.18.9, plus listed versions
2.10.02.10.0.pr12.10.0.pr22.10.0.pr32.10.1
Show 45 moreShow less
2.10.22.10.32.10.42.10.52.10.5.12.11.02.11.0.rc12.11.12.11.22.11.32.11.42.12.02.12.0-rc12.12.0-rc22.12.12.12.22.12.32.12.42.12.52.12.62.12.6.12.12.72.12.7.12.12.7.22.13.02.13.0-rc12.13.0-rc22.13.12.13.22.13.2.12.13.2.22.13.32.13.42.13.4.12.13.4.22.13.52.14.02.14.0-rc12.14.0-rc22.14.0-rc32.14.12.14.22.14.32.15.02.15.0-rc1
2.18.9
com.fasterxml.jackson.core:jackson-databind
Maven
 2.19.0 up to 2.21.5, plus listed versions
2.19.12.19.22.19.32.19.42.20.0
Show 8 moreShow less
2.20.0-rc12.20.12.20.22.21.02.21.12.21.22.21.32.21.4
2.21.5
com.fasterxml.jackson.core:jackson-databind
Red Hat Lightwell:Maven
From an advisory covering 8 CVEs
 before 2.17.3.rhlw-00013, plus listed versions
2.0.02.0.0-RC12.0.0-RC22.0.0-RC32.0.1
Show 45 moreShow less
2.0.22.0.42.0.52.0.62.1.02.1.12.1.22.1.32.1.42.1.52.10.02.10.0.pr12.10.0.pr22.10.0.pr32.10.12.10.22.10.32.10.42.10.52.10.5.12.11.02.11.0.rc12.11.12.11.22.11.32.11.42.12.02.12.0-rc12.12.0-rc22.12.12.12.22.12.32.12.42.12.52.12.62.12.6.12.12.72.12.7.12.12.7.22.13.02.13.0-rc12.13.0-rc22.13.12.13.22.13.2.1
2.17.3.rhlw-00013
com.fasterxml.jackson.core:jackson-databind
Red Hat Lightwell:Maven
From an advisory covering 7 CVEs
 before 2.18.0.rhlw-00010, plus listed versions
2.0.02.0.0-RC12.0.0-RC22.0.0-RC32.0.1
Show 45 moreShow less
2.0.22.0.42.0.52.0.62.1.02.1.12.1.22.1.32.1.42.1.52.10.02.10.0.pr12.10.0.pr22.10.0.pr32.10.12.10.22.10.32.10.42.10.52.10.5.12.11.02.11.0.rc12.11.12.11.22.11.32.11.42.12.02.12.0-rc12.12.0-rc22.12.12.12.22.12.32.12.42.12.52.12.62.12.6.12.12.72.12.7.12.12.7.22.13.02.13.0-rc12.13.0-rc22.13.12.13.22.13.2.1
2.18.0.rhlw-00010
eap7-activemq-artemis
Red Hat:jboss_enterprise_application_platform_els:7.4::el7
From an advisory covering 5 CVEs
 before 0:2.16.0-23.redhat_00058.1.el7eap
0:2.16.0-23.redhat_00058.1.el7eap
eap7-activemq-artemis-cli
Red Hat:jboss_enterprise_application_platform_els:7.4::el7
From an advisory covering 5 CVEs
 before 0:2.16.0-23.redhat_00058.1.el7eap
0:2.16.0-23.redhat_00058.1.el7eap
eap7-activemq-artemis-commons
Red Hat:jboss_enterprise_application_platform_els:7.4::el7
From an advisory covering 5 CVEs
 before 0:2.16.0-23.redhat_00058.1.el7eap
0:2.16.0-23.redhat_00058.1.el7eap
eap7-activemq-artemis-core-client
Red Hat:jboss_enterprise_application_platform_els:7.4::el7
From an advisory covering 5 CVEs
 before 0:2.16.0-23.redhat_00058.1.el7eap
0:2.16.0-23.redhat_00058.1.el7eap
eap7-activemq-artemis-dto
Red Hat:jboss_enterprise_application_platform_els:7.4::el7
From an advisory covering 5 CVEs
 before 0:2.16.0-23.redhat_00058.1.el7eap
0:2.16.0-23.redhat_00058.1.el7eap
eap7-activemq-artemis-hornetq-protocol
Red Hat:jboss_enterprise_application_platform_els:7.4::el7
From an advisory covering 5 CVEs
 before 0:2.16.0-23.redhat_00058.1.el7eap
0:2.16.0-23.redhat_00058.1.el7eap
eap7-activemq-artemis-hqclient-protocol
Red Hat:jboss_enterprise_application_platform_els:7.4::el7
From an advisory covering 5 CVEs
 before 0:2.16.0-23.redhat_00058.1.el7eap
0:2.16.0-23.redhat_00058.1.el7eap
eap7-activemq-artemis-jdbc-store
Red Hat:jboss_enterprise_application_platform_els:7.4::el7
From an advisory covering 5 CVEs
 before 0:2.16.0-23.redhat_00058.1.el7eap
0:2.16.0-23.redhat_00058.1.el7eap
eap7-activemq-artemis-jms-client
Red Hat:jboss_enterprise_application_platform_els:7.4::el7
From an advisory covering 5 CVEs
 before 0:2.16.0-23.redhat_00058.1.el7eap
0:2.16.0-23.redhat_00058.1.el7eap
eap7-activemq-artemis-jms-server
Red Hat:jboss_enterprise_application_platform_els:7.4::el7
From an advisory covering 5 CVEs
 before 0:2.16.0-23.redhat_00058.1.el7eap
0:2.16.0-23.redhat_00058.1.el7eap
eap7-activemq-artemis-journal
Red Hat:jboss_enterprise_application_platform_els:7.4::el7
From an advisory covering 5 CVEs
 before 0:2.16.0-23.redhat_00058.1.el7eap
0:2.16.0-23.redhat_00058.1.el7eap
eap7-activemq-artemis-ra
Red Hat:jboss_enterprise_application_platform_els:7.4::el7
From an advisory covering 5 CVEs
 before 0:2.16.0-23.redhat_00058.1.el7eap
0:2.16.0-23.redhat_00058.1.el7eap
eap7-activemq-artemis-selector
Red Hat:jboss_enterprise_application_platform_els:7.4::el7
From an advisory covering 5 CVEs
 before 0:2.16.0-23.redhat_00058.1.el7eap
0:2.16.0-23.redhat_00058.1.el7eap
eap7-activemq-artemis-server
Red Hat:jboss_enterprise_application_platform_els:7.4::el7
From an advisory covering 5 CVEs
 before 0:2.16.0-23.redhat_00058.1.el7eap
0:2.16.0-23.redhat_00058.1.el7eap
eap7-activemq-artemis-service-extensions
Red Hat:jboss_enterprise_application_platform_els:7.4::el7
From an advisory covering 5 CVEs
 before 0:2.16.0-23.redhat_00058.1.el7eap
0:2.16.0-23.redhat_00058.1.el7eap
eap7-activemq-artemis-tools
Red Hat:jboss_enterprise_application_platform_els:7.4::el7
From an advisory covering 5 CVEs
 before 0:2.16.0-23.redhat_00058.1.el7eap
0:2.16.0-23.redhat_00058.1.el7eap
eap7-jackson-annotations
Red Hat:jboss_enterprise_application_platform_els:7.4::el7
From an advisory covering 5 CVEs
 before 0:2.18.9-1.redhat_00003.1.el7eap
0:2.18.9-1.redhat_00003.1.el7eap
eap7-jackson-core
Red Hat:jboss_enterprise_application_platform_els:7.4::el7
From an advisory covering 5 CVEs
 before 0:2.18.9-1.redhat_00003.1.el7eap
0:2.18.9-1.redhat_00003.1.el7eap
eap7-jackson-databind
Red Hat:jboss_enterprise_application_platform_els:7.4::el7
From an advisory covering 5 CVEs
 before 0:2.18.9-1.redhat_00003.1.el7eap
0:2.18.9-1.redhat_00003.1.el7eap
eap7-jackson-datatype-jdk8
Red Hat:jboss_enterprise_application_platform_els:7.4::el7
From an advisory covering 5 CVEs
 before 0:2.18.9-1.redhat_00003.1.el7eap
0:2.18.9-1.redhat_00003.1.el7eap
eap7-jackson-datatype-jsr310
Red Hat:jboss_enterprise_application_platform_els:7.4::el7
From an advisory covering 5 CVEs
 before 0:2.18.9-1.redhat_00003.1.el7eap
0:2.18.9-1.redhat_00003.1.el7eap
eap7-jackson-jaxrs-base
Red Hat:jboss_enterprise_application_platform_els:7.4::el7
From an advisory covering 5 CVEs
 before 0:2.18.9-1.redhat_00003.1.el7eap
0:2.18.9-1.redhat_00003.1.el7eap
eap7-jackson-jaxrs-json-provider
Red Hat:jboss_enterprise_application_platform_els:7.4::el7
From an advisory covering 5 CVEs
 before 0:2.18.9-1.redhat_00003.1.el7eap
0:2.18.9-1.redhat_00003.1.el7eap
eap7-jackson-jaxrs-providers
Red Hat:jboss_enterprise_application_platform_els:7.4::el7
From an advisory covering 5 CVEs
 before 0:2.18.9-1.redhat_00003.1.el7eap
0:2.18.9-1.redhat_00003.1.el7eap
eap7-jackson-module-jaxb-annotations
Red Hat:jboss_enterprise_application_platform_els:7.4::el7
From an advisory covering 5 CVEs
 before 0:2.18.9-1.redhat_00003.1.el7eap
0:2.18.9-1.redhat_00003.1.el7eap
eap7-jackson-modules-base
Red Hat:jboss_enterprise_application_platform_els:7.4::el7
From an advisory covering 5 CVEs
 before 0:2.18.9-1.redhat_00003.1.el7eap
0:2.18.9-1.redhat_00003.1.el7eap
eap7-jackson-modules-java8
Red Hat:jboss_enterprise_application_platform_els:7.4::el7
From an advisory covering 5 CVEs
 before 0:2.18.9-1.redhat_00003.1.el7eap
0:2.18.9-1.redhat_00003.1.el7eap
eap7-wildfly
Red Hat:jboss_enterprise_application_platform_els:7.4::el7
From an advisory covering 5 CVEs
 before 0:7.4.25-6.GA_redhat_00005.1.el7eap
0:7.4.25-6.GA_redhat_00005.1.el7eap
eap7-wildfly-java-jdk11
Red Hat:jboss_enterprise_application_platform_els:7.4::el7
From an advisory covering 5 CVEs
 before 0:7.4.25-6.GA_redhat_00005.1.el7eap
0:7.4.25-6.GA_redhat_00005.1.el7eap
eap7-wildfly-java-jdk8
Red Hat:jboss_enterprise_application_platform_els:7.4::el7
From an advisory covering 5 CVEs
 before 0:7.4.25-6.GA_redhat_00005.1.el7eap
0:7.4.25-6.GA_redhat_00005.1.el7eap
eap7-wildfly-modules
Red Hat:jboss_enterprise_application_platform_els:7.4::el7
From an advisory covering 5 CVEs
 before 0:7.4.25-6.GA_redhat_00005.1.el7eap
0:7.4.25-6.GA_redhat_00005.1.el7eap
eap7-activemq-artemis
Red Hat:jboss_enterprise_application_platform_els:7.4::el8
From an advisory covering 5 CVEs
 before 0:2.16.0-23.redhat_00058.1.el8eap
0:2.16.0-23.redhat_00058.1.el8eap
eap7-activemq-artemis-cli
Red Hat:jboss_enterprise_application_platform_els:7.4::el8
From an advisory covering 5 CVEs
 before 0:2.16.0-23.redhat_00058.1.el8eap
0:2.16.0-23.redhat_00058.1.el8eap
eap7-activemq-artemis-commons
Red Hat:jboss_enterprise_application_platform_els:7.4::el8
From an advisory covering 5 CVEs
 before 0:2.16.0-23.redhat_00058.1.el8eap
0:2.16.0-23.redhat_00058.1.el8eap
eap7-activemq-artemis-core-client
Red Hat:jboss_enterprise_application_platform_els:7.4::el8
From an advisory covering 5 CVEs
 before 0:2.16.0-23.redhat_00058.1.el8eap
0:2.16.0-23.redhat_00058.1.el8eap
eap7-activemq-artemis-dto
Red Hat:jboss_enterprise_application_platform_els:7.4::el8
From an advisory covering 5 CVEs
 before 0:2.16.0-23.redhat_00058.1.el8eap
0:2.16.0-23.redhat_00058.1.el8eap
eap7-activemq-artemis-hornetq-protocol
Red Hat:jboss_enterprise_application_platform_els:7.4::el8
From an advisory covering 5 CVEs
 before 0:2.16.0-23.redhat_00058.1.el8eap
0:2.16.0-23.redhat_00058.1.el8eap
eap7-activemq-artemis-hqclient-protocol
Red Hat:jboss_enterprise_application_platform_els:7.4::el8
From an advisory covering 5 CVEs
 before 0:2.16.0-23.redhat_00058.1.el8eap
0:2.16.0-23.redhat_00058.1.el8eap
eap7-activemq-artemis-jdbc-store
Red Hat:jboss_enterprise_application_platform_els:7.4::el8
From an advisory covering 5 CVEs
 before 0:2.16.0-23.redhat_00058.1.el8eap
0:2.16.0-23.redhat_00058.1.el8eap
eap7-activemq-artemis-jms-client
Red Hat:jboss_enterprise_application_platform_els:7.4::el8
From an advisory covering 5 CVEs
 before 0:2.16.0-23.redhat_00058.1.el8eap
0:2.16.0-23.redhat_00058.1.el8eap
eap7-activemq-artemis-jms-server
Red Hat:jboss_enterprise_application_platform_els:7.4::el8
From an advisory covering 5 CVEs
 before 0:2.16.0-23.redhat_00058.1.el8eap
0:2.16.0-23.redhat_00058.1.el8eap
eap7-activemq-artemis-journal
Red Hat:jboss_enterprise_application_platform_els:7.4::el8
From an advisory covering 5 CVEs
 before 0:2.16.0-23.redhat_00058.1.el8eap
0:2.16.0-23.redhat_00058.1.el8eap
eap7-activemq-artemis-ra
Red Hat:jboss_enterprise_application_platform_els:7.4::el8
From an advisory covering 5 CVEs
 before 0:2.16.0-23.redhat_00058.1.el8eap
0:2.16.0-23.redhat_00058.1.el8eap
eap7-activemq-artemis-selector
Red Hat:jboss_enterprise_application_platform_els:7.4::el8
From an advisory covering 5 CVEs
 before 0:2.16.0-23.redhat_00058.1.el8eap
0:2.16.0-23.redhat_00058.1.el8eap
eap7-activemq-artemis-server
Red Hat:jboss_enterprise_application_platform_els:7.4::el8
From an advisory covering 5 CVEs
 before 0:2.16.0-23.redhat_00058.1.el8eap
0:2.16.0-23.redhat_00058.1.el8eap
eap7-activemq-artemis-service-extensions
Red Hat:jboss_enterprise_application_platform_els:7.4::el8
From an advisory covering 5 CVEs
 before 0:2.16.0-23.redhat_00058.1.el8eap
0:2.16.0-23.redhat_00058.1.el8eap
eap7-activemq-artemis-tools
Red Hat:jboss_enterprise_application_platform_els:7.4::el8
From an advisory covering 5 CVEs
 before 0:2.16.0-23.redhat_00058.1.el8eap
0:2.16.0-23.redhat_00058.1.el8eap
eap7-jackson-annotations
Red Hat:jboss_enterprise_application_platform_els:7.4::el8
From an advisory covering 5 CVEs
 before 0:2.18.9-1.redhat_00003.1.el8eap
0:2.18.9-1.redhat_00003.1.el8eap
eap7-jackson-core
Red Hat:jboss_enterprise_application_platform_els:7.4::el8
From an advisory covering 5 CVEs
 before 0:2.18.9-1.redhat_00003.1.el8eap
0:2.18.9-1.redhat_00003.1.el8eap
eap7-jackson-databind
Red Hat:jboss_enterprise_application_platform_els:7.4::el8
From an advisory covering 5 CVEs
 before 0:2.18.9-1.redhat_00003.1.el8eap
0:2.18.9-1.redhat_00003.1.el8eap
eap7-jackson-datatype-jdk8
Red Hat:jboss_enterprise_application_platform_els:7.4::el8
From an advisory covering 5 CVEs
 before 0:2.18.9-1.redhat_00003.1.el8eap
0:2.18.9-1.redhat_00003.1.el8eap
eap7-jackson-datatype-jsr310
Red Hat:jboss_enterprise_application_platform_els:7.4::el8
From an advisory covering 5 CVEs
 before 0:2.18.9-1.redhat_00003.1.el8eap
0:2.18.9-1.redhat_00003.1.el8eap
eap7-jackson-jaxrs-base
Red Hat:jboss_enterprise_application_platform_els:7.4::el8
From an advisory covering 5 CVEs
 before 0:2.18.9-1.redhat_00003.1.el8eap
0:2.18.9-1.redhat_00003.1.el8eap
eap7-jackson-jaxrs-json-provider
Red Hat:jboss_enterprise_application_platform_els:7.4::el8
From an advisory covering 5 CVEs
 before 0:2.18.9-1.redhat_00003.1.el8eap
0:2.18.9-1.redhat_00003.1.el8eap
eap7-jackson-jaxrs-providers
Red Hat:jboss_enterprise_application_platform_els:7.4::el8
From an advisory covering 5 CVEs
 before 0:2.18.9-1.redhat_00003.1.el8eap
0:2.18.9-1.redhat_00003.1.el8eap
eap7-jackson-module-jaxb-annotations
Red Hat:jboss_enterprise_application_platform_els:7.4::el8
From an advisory covering 5 CVEs
 before 0:2.18.9-1.redhat_00003.1.el8eap
0:2.18.9-1.redhat_00003.1.el8eap
eap7-jackson-modules-base
Red Hat:jboss_enterprise_application_platform_els:7.4::el8
From an advisory covering 5 CVEs
 before 0:2.18.9-1.redhat_00003.1.el8eap
0:2.18.9-1.redhat_00003.1.el8eap
eap7-jackson-modules-java8
Red Hat:jboss_enterprise_application_platform_els:7.4::el8
From an advisory covering 5 CVEs
 before 0:2.18.9-1.redhat_00003.1.el8eap
0:2.18.9-1.redhat_00003.1.el8eap
eap7-wildfly
Red Hat:jboss_enterprise_application_platform_els:7.4::el8
From an advisory covering 5 CVEs
 before 0:7.4.25-6.GA_redhat_00005.1.el8eap
0:7.4.25-6.GA_redhat_00005.1.el8eap
eap7-wildfly-java-jdk11
Red Hat:jboss_enterprise_application_platform_els:7.4::el8
From an advisory covering 5 CVEs
 before 0:7.4.25-6.GA_redhat_00005.1.el8eap
0:7.4.25-6.GA_redhat_00005.1.el8eap
eap7-wildfly-java-jdk17
Red Hat:jboss_enterprise_application_platform_els:7.4::el8
From an advisory covering 5 CVEs
 before 0:7.4.25-6.GA_redhat_00005.1.el8eap
0:7.4.25-6.GA_redhat_00005.1.el8eap
eap7-wildfly-java-jdk8
Red Hat:jboss_enterprise_application_platform_els:7.4::el8
From an advisory covering 5 CVEs
 before 0:7.4.25-6.GA_redhat_00005.1.el8eap
0:7.4.25-6.GA_redhat_00005.1.el8eap
eap7-wildfly-modules
Red Hat:jboss_enterprise_application_platform_els:7.4::el8
From an advisory covering 5 CVEs
 before 0:7.4.25-6.GA_redhat_00005.1.el8eap
0:7.4.25-6.GA_redhat_00005.1.el8eap
eap7-activemq-artemis
Red Hat:jboss_enterprise_application_platform_els:7.4::el9
From an advisory covering 5 CVEs
 before 0:2.16.0-23.redhat_00058.1.el9eap
0:2.16.0-23.redhat_00058.1.el9eap
eap7-activemq-artemis-cli
Red Hat:jboss_enterprise_application_platform_els:7.4::el9
From an advisory covering 5 CVEs
 before 0:2.16.0-23.redhat_00058.1.el9eap
0:2.16.0-23.redhat_00058.1.el9eap
eap7-activemq-artemis-commons
Red Hat:jboss_enterprise_application_platform_els:7.4::el9
From an advisory covering 5 CVEs
 before 0:2.16.0-23.redhat_00058.1.el9eap
0:2.16.0-23.redhat_00058.1.el9eap
eap7-activemq-artemis-core-client
Red Hat:jboss_enterprise_application_platform_els:7.4::el9
From an advisory covering 5 CVEs
 before 0:2.16.0-23.redhat_00058.1.el9eap
0:2.16.0-23.redhat_00058.1.el9eap
eap7-activemq-artemis-dto
Red Hat:jboss_enterprise_application_platform_els:7.4::el9
From an advisory covering 5 CVEs
 before 0:2.16.0-23.redhat_00058.1.el9eap
0:2.16.0-23.redhat_00058.1.el9eap
eap7-activemq-artemis-hornetq-protocol
Red Hat:jboss_enterprise_application_platform_els:7.4::el9
From an advisory covering 5 CVEs
 before 0:2.16.0-23.redhat_00058.1.el9eap
0:2.16.0-23.redhat_00058.1.el9eap
eap7-activemq-artemis-hqclient-protocol
Red Hat:jboss_enterprise_application_platform_els:7.4::el9
From an advisory covering 5 CVEs
 before 0:2.16.0-23.redhat_00058.1.el9eap
0:2.16.0-23.redhat_00058.1.el9eap
eap7-activemq-artemis-jdbc-store
Red Hat:jboss_enterprise_application_platform_els:7.4::el9
From an advisory covering 5 CVEs
 before 0:2.16.0-23.redhat_00058.1.el9eap
0:2.16.0-23.redhat_00058.1.el9eap
eap7-activemq-artemis-jms-client
Red Hat:jboss_enterprise_application_platform_els:7.4::el9
From an advisory covering 5 CVEs
 before 0:2.16.0-23.redhat_00058.1.el9eap
0:2.16.0-23.redhat_00058.1.el9eap
eap7-activemq-artemis-jms-server
Red Hat:jboss_enterprise_application_platform_els:7.4::el9
From an advisory covering 5 CVEs
 before 0:2.16.0-23.redhat_00058.1.el9eap
0:2.16.0-23.redhat_00058.1.el9eap
eap7-activemq-artemis-journal
Red Hat:jboss_enterprise_application_platform_els:7.4::el9
From an advisory covering 5 CVEs
 before 0:2.16.0-23.redhat_00058.1.el9eap
0:2.16.0-23.redhat_00058.1.el9eap
eap7-activemq-artemis-ra
Red Hat:jboss_enterprise_application_platform_els:7.4::el9
From an advisory covering 5 CVEs
 before 0:2.16.0-23.redhat_00058.1.el9eap
0:2.16.0-23.redhat_00058.1.el9eap
eap7-activemq-artemis-selector
Red Hat:jboss_enterprise_application_platform_els:7.4::el9
From an advisory covering 5 CVEs
 before 0:2.16.0-23.redhat_00058.1.el9eap
0:2.16.0-23.redhat_00058.1.el9eap
eap7-activemq-artemis-server
Red Hat:jboss_enterprise_application_platform_els:7.4::el9
From an advisory covering 5 CVEs
 before 0:2.16.0-23.redhat_00058.1.el9eap
0:2.16.0-23.redhat_00058.1.el9eap
eap7-activemq-artemis-service-extensions
Red Hat:jboss_enterprise_application_platform_els:7.4::el9
From an advisory covering 5 CVEs
 before 0:2.16.0-23.redhat_00058.1.el9eap
0:2.16.0-23.redhat_00058.1.el9eap
eap7-activemq-artemis-tools
Red Hat:jboss_enterprise_application_platform_els:7.4::el9
From an advisory covering 5 CVEs
 before 0:2.16.0-23.redhat_00058.1.el9eap
0:2.16.0-23.redhat_00058.1.el9eap
eap7-jackson-annotations
Red Hat:jboss_enterprise_application_platform_els:7.4::el9
From an advisory covering 5 CVEs
 before 0:2.18.9-1.redhat_00003.1.el9eap
0:2.18.9-1.redhat_00003.1.el9eap
eap7-jackson-core
Red Hat:jboss_enterprise_application_platform_els:7.4::el9
From an advisory covering 5 CVEs
 before 0:2.18.9-1.redhat_00003.1.el9eap
0:2.18.9-1.redhat_00003.1.el9eap
eap7-jackson-databind
Red Hat:jboss_enterprise_application_platform_els:7.4::el9
From an advisory covering 5 CVEs
 before 0:2.18.9-1.redhat_00003.1.el9eap
0:2.18.9-1.redhat_00003.1.el9eap
eap7-jackson-datatype-jdk8
Red Hat:jboss_enterprise_application_platform_els:7.4::el9
From an advisory covering 5 CVEs
 before 0:2.18.9-1.redhat_00003.1.el9eap
0:2.18.9-1.redhat_00003.1.el9eap
eap7-jackson-datatype-jsr310
Red Hat:jboss_enterprise_application_platform_els:7.4::el9
From an advisory covering 5 CVEs
 before 0:2.18.9-1.redhat_00003.1.el9eap
0:2.18.9-1.redhat_00003.1.el9eap
eap7-jackson-jaxrs-base
Red Hat:jboss_enterprise_application_platform_els:7.4::el9
From an advisory covering 5 CVEs
 before 0:2.18.9-1.redhat_00003.1.el9eap
0:2.18.9-1.redhat_00003.1.el9eap
eap7-jackson-jaxrs-json-provider
Red Hat:jboss_enterprise_application_platform_els:7.4::el9
From an advisory covering 5 CVEs
 before 0:2.18.9-1.redhat_00003.1.el9eap
0:2.18.9-1.redhat_00003.1.el9eap
eap7-jackson-jaxrs-providers
Red Hat:jboss_enterprise_application_platform_els:7.4::el9
From an advisory covering 5 CVEs
 before 0:2.18.9-1.redhat_00003.1.el9eap
0:2.18.9-1.redhat_00003.1.el9eap
eap7-jackson-module-jaxb-annotations
Red Hat:jboss_enterprise_application_platform_els:7.4::el9
From an advisory covering 5 CVEs
 before 0:2.18.9-1.redhat_00003.1.el9eap
0:2.18.9-1.redhat_00003.1.el9eap
eap7-jackson-modules-base
Red Hat:jboss_enterprise_application_platform_els:7.4::el9
From an advisory covering 5 CVEs
 before 0:2.18.9-1.redhat_00003.1.el9eap
0:2.18.9-1.redhat_00003.1.el9eap
eap7-jackson-modules-java8
Red Hat:jboss_enterprise_application_platform_els:7.4::el9
From an advisory covering 5 CVEs
 before 0:2.18.9-1.redhat_00003.1.el9eap
0:2.18.9-1.redhat_00003.1.el9eap
eap7-wildfly
Red Hat:jboss_enterprise_application_platform_els:7.4::el9
From an advisory covering 5 CVEs
 before 0:7.4.25-6.GA_redhat_00005.1.el9eap
0:7.4.25-6.GA_redhat_00005.1.el9eap
eap7-wildfly-java-jdk11
Red Hat:jboss_enterprise_application_platform_els:7.4::el9
From an advisory covering 5 CVEs
 before 0:7.4.25-6.GA_redhat_00005.1.el9eap
0:7.4.25-6.GA_redhat_00005.1.el9eap
eap7-wildfly-java-jdk17
Red Hat:jboss_enterprise_application_platform_els:7.4::el9
From an advisory covering 5 CVEs
 before 0:7.4.25-6.GA_redhat_00005.1.el9eap
0:7.4.25-6.GA_redhat_00005.1.el9eap
eap7-wildfly-java-jdk8
Red Hat:jboss_enterprise_application_platform_els:7.4::el9
From an advisory covering 5 CVEs
 before 0:7.4.25-6.GA_redhat_00005.1.el9eap
0:7.4.25-6.GA_redhat_00005.1.el9eap
eap7-wildfly-modules
Red Hat:jboss_enterprise_application_platform_els:7.4::el9
From an advisory covering 5 CVEs
 before 0:7.4.25-6.GA_redhat_00005.1.el9eap
0:7.4.25-6.GA_redhat_00005.1.el9eap
eap8-activemq-artemis
Red Hat:jboss_enterprise_application_platform:8.1::el8
From an advisory covering 36 CVEs
 before 0:2.40.0-8.redhat_00024.1.el8eap
0:2.40.0-8.redhat_00024.1.el8eap
eap8-activemq-artemis-cli
Red Hat:jboss_enterprise_application_platform:8.1::el8
From an advisory covering 36 CVEs
 before 0:2.40.0-8.redhat_00024.1.el8eap
0:2.40.0-8.redhat_00024.1.el8eap
eap8-activemq-artemis-commons
Red Hat:jboss_enterprise_application_platform:8.1::el8
From an advisory covering 36 CVEs
 before 0:2.40.0-8.redhat_00024.1.el8eap
0:2.40.0-8.redhat_00024.1.el8eap
eap8-activemq-artemis-core-client
Red Hat:jboss_enterprise_application_platform:8.1::el8
From an advisory covering 36 CVEs
 before 0:2.40.0-8.redhat_00024.1.el8eap
0:2.40.0-8.redhat_00024.1.el8eap
eap8-activemq-artemis-dto
Red Hat:jboss_enterprise_application_platform:8.1::el8
From an advisory covering 36 CVEs
 before 0:2.40.0-8.redhat_00024.1.el8eap
0:2.40.0-8.redhat_00024.1.el8eap
eap8-activemq-artemis-hornetq-protocol
Red Hat:jboss_enterprise_application_platform:8.1::el8
From an advisory covering 36 CVEs
 before 0:2.40.0-8.redhat_00024.1.el8eap
0:2.40.0-8.redhat_00024.1.el8eap
eap8-activemq-artemis-hqclient-protocol
Red Hat:jboss_enterprise_application_platform:8.1::el8
From an advisory covering 36 CVEs
 before 0:2.40.0-8.redhat_00024.1.el8eap
0:2.40.0-8.redhat_00024.1.el8eap
eap8-activemq-artemis-jakarta-client
Red Hat:jboss_enterprise_application_platform:8.1::el8
From an advisory covering 36 CVEs
 before 0:2.40.0-8.redhat_00024.1.el8eap
0:2.40.0-8.redhat_00024.1.el8eap
eap8-activemq-artemis-jakarta-ra
Red Hat:jboss_enterprise_application_platform:8.1::el8
From an advisory covering 36 CVEs
 before 0:2.40.0-8.redhat_00024.1.el8eap
0:2.40.0-8.redhat_00024.1.el8eap
eap8-activemq-artemis-jakarta-server
Red Hat:jboss_enterprise_application_platform:8.1::el8
From an advisory covering 36 CVEs
 before 0:2.40.0-8.redhat_00024.1.el8eap
0:2.40.0-8.redhat_00024.1.el8eap
eap8-activemq-artemis-jakarta-service-extensions
Red Hat:jboss_enterprise_application_platform:8.1::el8
From an advisory covering 36 CVEs
 before 0:2.40.0-8.redhat_00024.1.el8eap
0:2.40.0-8.redhat_00024.1.el8eap
eap8-activemq-artemis-jdbc-store
Red Hat:jboss_enterprise_application_platform:8.1::el8
From an advisory covering 36 CVEs
 before 0:2.40.0-8.redhat_00024.1.el8eap
0:2.40.0-8.redhat_00024.1.el8eap
eap8-activemq-artemis-journal
Red Hat:jboss_enterprise_application_platform:8.1::el8
From an advisory covering 36 CVEs
 before 0:2.40.0-8.redhat_00024.1.el8eap
0:2.40.0-8.redhat_00024.1.el8eap
eap8-activemq-artemis-selector
Red Hat:jboss_enterprise_application_platform:8.1::el8
From an advisory covering 36 CVEs
 before 0:2.40.0-8.redhat_00024.1.el8eap
0:2.40.0-8.redhat_00024.1.el8eap
eap8-activemq-artemis-server
Red Hat:jboss_enterprise_application_platform:8.1::el8
From an advisory covering 36 CVEs
 before 0:2.40.0-8.redhat_00024.1.el8eap
0:2.40.0-8.redhat_00024.1.el8eap
eap8-apache-cxf
Red Hat:jboss_enterprise_application_platform:8.1::el8
From an advisory covering 36 CVEs
 before 0:4.1.7-1.SP1_redhat_00001.1.el8eap
0:4.1.7-1.SP1_redhat_00001.1.el8eap
eap8-apache-cxf-rt
Red Hat:jboss_enterprise_application_platform:8.1::el8
From an advisory covering 36 CVEs
 before 0:4.1.7-1.SP1_redhat_00001.1.el8eap
0:4.1.7-1.SP1_redhat_00001.1.el8eap
eap8-apache-cxf-services
Red Hat:jboss_enterprise_application_platform:8.1::el8
From an advisory covering 36 CVEs
 before 0:4.1.7-1.SP1_redhat_00001.1.el8eap
0:4.1.7-1.SP1_redhat_00001.1.el8eap
eap8-apache-cxf-tools
Red Hat:jboss_enterprise_application_platform:8.1::el8
From an advisory covering 36 CVEs
 before 0:4.1.7-1.SP1_redhat_00001.1.el8eap
0:4.1.7-1.SP1_redhat_00001.1.el8eap
eap8-artemis-wildfly-integration
Red Hat:jboss_enterprise_application_platform:8.1::el8
From an advisory covering 36 CVEs
 before 0:2.0.5-1.Final_redhat_00001.1.el8eap
0:2.0.5-1.Final_redhat_00001.1.el8eap
eap8-bouncycastle
Red Hat:jboss_enterprise_application_platform:8.1::el8
From an advisory covering 36 CVEs
 before 0:1.85.0-1.redhat_00001.1.el8eap
0:1.85.0-1.redhat_00001.1.el8eap
eap8-bouncycastle-jmail
Red Hat:jboss_enterprise_application_platform:8.1::el8
From an advisory covering 36 CVEs
 before 0:1.85.0-1.redhat_00001.1.el8eap
0:1.85.0-1.redhat_00001.1.el8eap
eap8-bouncycastle-pg
Red Hat:jboss_enterprise_application_platform:8.1::el8
From an advisory covering 36 CVEs
 before 0:1.85.0-1.redhat_00001.1.el8eap
0:1.85.0-1.redhat_00001.1.el8eap
eap8-bouncycastle-pkix
Red Hat:jboss_enterprise_application_platform:8.1::el8
From an advisory covering 36 CVEs
 before 0:1.85.0-1.redhat_00001.1.el8eap
0:1.85.0-1.redhat_00001.1.el8eap
eap8-bouncycastle-prov
Red Hat:jboss_enterprise_application_platform:8.1::el8
From an advisory covering 36 CVEs
 before 0:1.85.0-1.redhat_00001.1.el8eap
0:1.85.0-1.redhat_00001.1.el8eap
eap8-bouncycastle-util
Red Hat:jboss_enterprise_application_platform:8.1::el8
From an advisory covering 36 CVEs
 before 0:1.85.0-1.redhat_00001.1.el8eap
0:1.85.0-1.redhat_00001.1.el8eap
eap8-codemodel
Red Hat:jboss_enterprise_application_platform:8.1::el8
From an advisory covering 36 CVEs
 before 0:4.0.7-4.redhat_00001.1.el8eap
0:4.0.7-4.redhat_00001.1.el8eap
eap8-cryptacular
Red Hat:jboss_enterprise_application_platform:8.1::el8
From an advisory covering 36 CVEs
 before 0:1.2.7-1.redhat_00002.1.el8eap
0:1.2.7-1.redhat_00002.1.el8eap
eap8-eap-product-conf-parent
Red Hat:jboss_enterprise_application_platform:8.1::el8
From an advisory covering 36 CVEs
 before 0:801.8.0-1.GA_redhat_00001.1.el8eap
0:801.8.0-1.GA_redhat_00001.1.el8eap
eap8-eap-product-conf-wildfly-ee-feature-pack
Red Hat:jboss_enterprise_application_platform:8.1::el8
From an advisory covering 36 CVEs
 before 0:801.8.0-1.GA_redhat_00001.1.el8eap
0:801.8.0-1.GA_redhat_00001.1.el8eap
eap8-hibernate
Red Hat:jboss_enterprise_application_platform:8.1::el8
From an advisory covering 36 CVEs
 before 0:6.6.54-1.Final_redhat_00001.1.el8eap
0:6.6.54-1.Final_redhat_00001.1.el8eap
eap8-hibernate-core
Red Hat:jboss_enterprise_application_platform:8.1::el8
From an advisory covering 36 CVEs
 before 0:6.6.54-1.Final_redhat_00001.1.el8eap
0:6.6.54-1.Final_redhat_00001.1.el8eap
eap8-hibernate-envers
Red Hat:jboss_enterprise_application_platform:8.1::el8
From an advisory covering 36 CVEs
 before 0:6.6.54-1.Final_redhat_00001.1.el8eap
0:6.6.54-1.Final_redhat_00001.1.el8eap
eap8-httpcomponents-asyncclient
Red Hat:jboss_enterprise_application_platform:8.1::el8
From an advisory covering 36 CVEs
 before 0:4.1.5-5.redhat_00008.1.el8eap
0:4.1.5-5.redhat_00008.1.el8eap
com.fasterxml.jackson.core:jackson-databind
Root:Maven
 before 2.14.2-aikido.2
2.14.2-aikido.22.16.2-aikido.42.15.2-aikido.22.21.2-aikido.22.21.1-aikido.22.20.0-aikido.22.18.3-aikido.22.18.2-aikido.32.13.4.2-aikido.22.13.3-aikido.52.17.0-aikido.42.18.1-aikido.22.21.2-aikido.32.18.6-aikido.22.15.0-aikido.22.13.2.2-aikido.42.17.2-aikido.42.15.3-aikido.22.12.3-aikido.52.12.4-aikido.43.1.1-aikido.22.10.1-aikido.52.18.7-aikido.22.13.4-aikido.52.12.5-aikido.42.14.1-aikido.22.18.0-aikido.42.17.1-aikido.12.19.4-aikido.32.16.0-aikido.12.14.2-aikido.32.18.1-aikido.32.19.4-aikido.42.17.2-aikido.52.15.0-aikido.32.16.2-aikido.52.17.1-aikido.22.20.0-aikido.32.16.0-aikido.22.21.1-aikido.32.15.2-aikido.32.18.3-aikido.32.13.3-aikido.62.13.3-aikido.72.14.2-aikido.42.21.1-aikido.42.13.4.2-aikido.32.13.2.2-aikido.52.18.1-aikido.42.17.2-aikido.62.16.0-aikido.32.17.1-aikido.32.18.3-aikido.42.21.2-aikido.42.19.4-aikido.52.20.0-aikido.42.15.2-aikido.42.15.0-aikido.42.16.2-aikido.62.18.2-aikido.42.18.3-aikido.52.21.2-aikido.52.18.9-aikido.12.18.9-aikido.22.21.5-aikido.12.21.5-aikido.22.21.5-aikido.32.22.1-aikido.12.22.1-aikido.2
tools.jackson.core:jackson-databind
Root:Maven
 before 3.1.1-aikido.3
3.1.1-aikido.33.1.0-aikido.33.1.1-aikido.43.1.0-aikido.43.1.0-aikido.53.1.1-aikido.53.1.4-aikido.23.1.4-aikido.33.1.4-aikido.4
io.root.com.fasterxml.jackson.core:jackson-databind
Root:Maven
 before 2.14.2-root.io.2
2.14.2-root.io.22.16.2-root.io.42.15.2-root.io.22.21.2-root.io.22.21.1-root.io.22.20.0-root.io.22.18.3-root.io.22.18.2-root.io.32.13.4.2-root.io.22.13.3-root.io.52.17.0-root.io.42.18.1-root.io.22.21.2-root.io.32.18.6-root.io.22.15.0-root.io.22.13.2.2-root.io.42.17.2-root.io.42.15.3-root.io.22.12.3-root.io.52.12.4-root.io.43.1.1-root.io.22.10.1-root.io.52.18.7-root.io.22.13.4-root.io.52.12.5-root.io.42.14.1-root.io.22.18.0-root.io.42.17.1-root.io.12.19.4-root.io.32.16.0-root.io.12.14.2-root.io.32.18.1-root.io.32.19.4-root.io.42.17.2-root.io.52.15.0-root.io.32.16.2-root.io.52.17.1-root.io.22.20.0-root.io.32.16.0-root.io.22.21.1-root.io.32.15.2-root.io.32.18.3-root.io.32.13.3-root.io.62.13.3-root.io.72.14.2-root.io.42.21.1-root.io.42.13.4.2-root.io.32.13.2.2-root.io.52.18.1-root.io.42.17.2-root.io.62.16.0-root.io.32.17.1-root.io.32.18.3-root.io.42.21.2-root.io.42.19.4-root.io.52.20.0-root.io.42.15.2-root.io.42.15.0-root.io.42.16.2-root.io.62.18.2-root.io.42.18.3-root.io.52.21.2-root.io.52.18.9-root.io.12.18.9-root.io.22.21.5-root.io.12.21.5-root.io.22.21.5-root.io.32.22.1-root.io.12.22.1-root.io.2
io.root.tools.jackson.core:jackson-databind
Root:Maven
 before 3.1.1-root.io.3
3.1.1-root.io.33.1.0-root.io.33.1.1-root.io.43.1.0-root.io.43.1.0-root.io.53.1.1-root.io.53.1.4-root.io.23.1.4-root.io.33.1.4-root.io.4
jackson-annotations
SUSE:Linux Enterprise Server 16.0
From an advisory covering 4 CVEs
 before 2.18.8-160000.1.1
2.18.8-160000.1.1
jackson-core
SUSE:Linux Enterprise Server 16.0
From an advisory covering 4 CVEs
 before 2.18.8-160000.1.1
2.18.8-160000.1.1
jackson-databind
SUSE:Linux Enterprise Server 16.0
From an advisory covering 4 CVEs
 before 2.18.8-160000.1.1
2.18.8-160000.1.1
jackson-annotations
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 4 CVEs
 before 2.18.8-160000.1.1
2.18.8-160000.1.1
jackson-core
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 4 CVEs
 before 2.18.8-160000.1.1
2.18.8-160000.1.1
jackson-databind
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 4 CVEs
 before 2.18.8-160000.1.1
2.18.8-160000.1.1
jackson-annotations
SUSE:Linux Enterprise Server 16.0
From an advisory covering 3 CVEs
 before 2.18.9-160000.1.1
2.18.9-160000.1.1
jackson-core
SUSE:Linux Enterprise Server 16.0
From an advisory covering 3 CVEs
 before 2.18.9-160000.1.1
2.18.9-160000.1.1
jackson-databind
SUSE:Linux Enterprise Server 16.0
From an advisory covering 3 CVEs
 before 2.18.9-160000.1.1
2.18.9-160000.1.1
jackson-annotations
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 3 CVEs
 before 2.18.9-160000.1.1
2.18.9-160000.1.1
jackson-core
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 3 CVEs
 before 2.18.9-160000.1.1
2.18.9-160000.1.1
jackson-databind
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 3 CVEs
 before 2.18.9-160000.1.1
2.18.9-160000.1.1
jackson-annotations
SUSE:Linux Enterprise Module for Basesystem 15 SP7
From an advisory covering 4 CVEs
 before 2.18.8-150200.3.22.3
2.18.8-150200.3.22.3
jackson-core
SUSE:Linux Enterprise Module for Basesystem 15 SP7
From an advisory covering 4 CVEs
 before 2.18.8-150200.3.22.3
2.18.8-150200.3.22.3
jackson-databind
SUSE:Linux Enterprise Module for Basesystem 15 SP7
From an advisory covering 4 CVEs
 before 2.18.8-150200.3.28.2
2.18.8-150200.3.28.2
jackson-dataformats-binary
SUSE:Linux Enterprise Module for Development Tools 15 SP7
From an advisory covering 4 CVEs
 before 2.18.8-150200.3.21.3
2.18.8-150200.3.21.3
jackson-annotations
SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS
From an advisory covering 4 CVEs
 before 2.18.8-150200.3.22.3
2.18.8-150200.3.22.3
jackson-core
SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS
From an advisory covering 4 CVEs
 before 2.18.8-150200.3.22.3
2.18.8-150200.3.22.3
jackson-databind
SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS
From an advisory covering 4 CVEs
 before 2.18.8-150200.3.28.2
2.18.8-150200.3.28.2
jackson-dataformats-binary
SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS
From an advisory covering 4 CVEs
 before 2.18.8-150200.3.21.3
2.18.8-150200.3.21.3
jackson-annotations
SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS
From an advisory covering 4 CVEs
 before 2.18.8-150200.3.22.3
2.18.8-150200.3.22.3
jackson-core
SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS
From an advisory covering 4 CVEs
 before 2.18.8-150200.3.22.3
2.18.8-150200.3.22.3
jackson-databind
SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS
From an advisory covering 4 CVEs
 before 2.18.8-150200.3.28.2
2.18.8-150200.3.28.2
jackson-dataformats-binary
SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS
From an advisory covering 4 CVEs
 before 2.18.8-150200.3.21.3
2.18.8-150200.3.21.3
jackson-annotations
SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS
From an advisory covering 4 CVEs
 before 2.18.8-150200.3.22.3
2.18.8-150200.3.22.3
jackson-core
SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS
From an advisory covering 4 CVEs
 before 2.18.8-150200.3.22.3
2.18.8-150200.3.22.3
jackson-databind
SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS
From an advisory covering 4 CVEs
 before 2.18.8-150200.3.28.2
2.18.8-150200.3.28.2
jackson-dataformats-binary
SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS
From an advisory covering 4 CVEs
 before 2.18.8-150200.3.21.3
2.18.8-150200.3.21.3
jackson-annotations
SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS
From an advisory covering 4 CVEs
 before 2.18.8-150200.3.22.3
2.18.8-150200.3.22.3
jackson-core
SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS
From an advisory covering 4 CVEs
 before 2.18.8-150200.3.22.3
2.18.8-150200.3.22.3
jackson-databind
SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS
From an advisory covering 4 CVEs
 before 2.18.8-150200.3.28.2
2.18.8-150200.3.28.2
jackson-dataformats-binary
SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS
From an advisory covering 4 CVEs
 before 2.18.8-150200.3.21.3
2.18.8-150200.3.21.3
jackson-annotations
SUSE:Linux Enterprise Server 15 SP4-LTSS
From an advisory covering 4 CVEs
 before 2.18.8-150200.3.22.3
2.18.8-150200.3.22.3
jackson-core
SUSE:Linux Enterprise Server 15 SP4-LTSS
From an advisory covering 4 CVEs
 before 2.18.8-150200.3.22.3
2.18.8-150200.3.22.3
jackson-databind
SUSE:Linux Enterprise Server 15 SP4-LTSS
From an advisory covering 4 CVEs
 before 2.18.8-150200.3.28.2
2.18.8-150200.3.28.2
jackson-dataformats-binary
SUSE:Linux Enterprise Server 15 SP4-LTSS
From an advisory covering 4 CVEs
 before 2.18.8-150200.3.21.3
2.18.8-150200.3.21.3
jackson-annotations
SUSE:Linux Enterprise Server 15 SP5-LTSS
From an advisory covering 4 CVEs
 before 2.18.8-150200.3.22.3
2.18.8-150200.3.22.3
jackson-core
SUSE:Linux Enterprise Server 15 SP5-LTSS
From an advisory covering 4 CVEs
 before 2.18.8-150200.3.22.3
2.18.8-150200.3.22.3
jackson-databind
SUSE:Linux Enterprise Server 15 SP5-LTSS
From an advisory covering 4 CVEs
 before 2.18.8-150200.3.28.2
2.18.8-150200.3.28.2
jackson-dataformats-binary
SUSE:Linux Enterprise Server 15 SP5-LTSS
From an advisory covering 4 CVEs
 before 2.18.8-150200.3.21.3
2.18.8-150200.3.21.3
jackson-annotations
SUSE:Linux Enterprise Server 15 SP6-LTSS
From an advisory covering 4 CVEs
 before 2.18.8-150200.3.22.3
2.18.8-150200.3.22.3
jackson-core
SUSE:Linux Enterprise Server 15 SP6-LTSS
From an advisory covering 4 CVEs
 before 2.18.8-150200.3.22.3
2.18.8-150200.3.22.3
jackson-databind
SUSE:Linux Enterprise Server 15 SP6-LTSS
From an advisory covering 4 CVEs
 before 2.18.8-150200.3.28.2
2.18.8-150200.3.28.2
jackson-dataformats-binary
SUSE:Linux Enterprise Server 15 SP6-LTSS
From an advisory covering 4 CVEs
 before 2.18.8-150200.3.21.3
2.18.8-150200.3.21.3
jackson-annotations
SUSE:Linux Enterprise Server for SAP Applications 15 SP4
From an advisory covering 4 CVEs
 before 2.18.8-150200.3.22.3
2.18.8-150200.3.22.3
jackson-core
SUSE:Linux Enterprise Server for SAP Applications 15 SP4
From an advisory covering 4 CVEs
 before 2.18.8-150200.3.22.3
2.18.8-150200.3.22.3
jackson-databind
SUSE:Linux Enterprise Server for SAP Applications 15 SP4
From an advisory covering 4 CVEs
 before 2.18.8-150200.3.28.2
2.18.8-150200.3.28.2
jackson-dataformats-binary
SUSE:Linux Enterprise Server for SAP Applications 15 SP4
From an advisory covering 4 CVEs
 before 2.18.8-150200.3.21.3
2.18.8-150200.3.21.3
jackson-annotations
SUSE:Linux Enterprise Server for SAP Applications 15 SP5
From an advisory covering 4 CVEs
 before 2.18.8-150200.3.22.3
2.18.8-150200.3.22.3
jackson-core
SUSE:Linux Enterprise Server for SAP Applications 15 SP5
From an advisory covering 4 CVEs
 before 2.18.8-150200.3.22.3
2.18.8-150200.3.22.3
jackson-databind
SUSE:Linux Enterprise Server for SAP Applications 15 SP5
From an advisory covering 4 CVEs
 before 2.18.8-150200.3.28.2
2.18.8-150200.3.28.2
jackson-dataformats-binary
SUSE:Linux Enterprise Server for SAP Applications 15 SP5
From an advisory covering 4 CVEs
 before 2.18.8-150200.3.21.3
2.18.8-150200.3.21.3
jackson-annotations
SUSE:Linux Enterprise Server for SAP Applications 15 SP6
From an advisory covering 4 CVEs
 before 2.18.8-150200.3.22.3
2.18.8-150200.3.22.3
jackson-core
SUSE:Linux Enterprise Server for SAP Applications 15 SP6
From an advisory covering 4 CVEs
 before 2.18.8-150200.3.22.3
2.18.8-150200.3.22.3
jackson-databind
SUSE:Linux Enterprise Server for SAP Applications 15 SP6
From an advisory covering 4 CVEs
 before 2.18.8-150200.3.28.2
2.18.8-150200.3.28.2
jackson-dataformats-binary
SUSE:Linux Enterprise Server for SAP Applications 15 SP6
From an advisory covering 4 CVEs
 before 2.18.8-150200.3.21.3
2.18.8-150200.3.21.3
jackson-annotations
SUSE:Linux Enterprise Module for Basesystem 15 SP7
From an advisory covering 3 CVEs
 before 2.18.9-150200.3.25.1
2.18.9-150200.3.25.1
jackson-core
SUSE:Linux Enterprise Module for Basesystem 15 SP7
From an advisory covering 3 CVEs
 before 2.18.9-150200.3.25.1
2.18.9-150200.3.25.1
jackson-databind
SUSE:Linux Enterprise Module for Basesystem 15 SP7
From an advisory covering 3 CVEs
 before 2.18.9-150200.3.33.1
2.18.9-150200.3.33.1
jackson-dataformats-binary
SUSE:Linux Enterprise Module for Development Tools 15 SP7
From an advisory covering 3 CVEs
 before 2.18.9-150200.3.24.1
2.18.9-150200.3.24.1
jackson-databind
Ubuntu:Pro:14.04:LTS
 All versions, plus listed versions
2.2.2-12.2.2-1ubuntu0.1~esm1
 None known
jackson-databind
Ubuntu:Pro:16.04:LTS
 All versions, plus listed versions
2.4.2-22.4.2-32.4.2-3ubuntu0.1~esm12.4.2-3ubuntu0.1~esm2
 None known
jackson-databind
Ubuntu:18.04:LTS
 All versions, plus listed versions
2.8.6-12.9.1-12.9.4-12.9.5-12.9.8-1~18.04
 None known
jackson-databind
Ubuntu:20.04:LTS
 All versions, plus listed versions
2.9.9.3-12.10.0-22.10.1-12.10.2-1
 None known
jackson-databind
Ubuntu:22.04:LTS
 All versions, plus listed versions
2.12.1-12.12.5-12.13.0-12.13.0-2
 None known
jackson-databind
Ubuntu:24.04:LTS
 All versions, plus listed versions
2.14.0-1
 None known
jackson-databind
Ubuntu:25.10
 All versions, plus listed versions
2.14.0+ds-1
 None known
jackson-databind
Ubuntu:26.10
 All versions, plus listed versions
2.14.0+ds-1build12.14.0+ds-2
 None known
jackson-databind
Ubuntu:26.04:LTS
 All versions, plus listed versions
2.14.0+ds-12.14.0+ds-1build1
 None known
jackson-databind
openSUSE:Tumbleweed
From an advisory covering 3 CVEs
 before 2.18.8-1.1
2.18.8-1.1
jackson-annotations
openSUSE:Leap 16.0
From an advisory covering 4 CVEs
 before 2.18.8-160000.1.1
2.18.8-160000.1.1
jackson-core
openSUSE:Leap 16.0
From an advisory covering 4 CVEs
 before 2.18.8-160000.1.1
2.18.8-160000.1.1
jackson-databind
openSUSE:Leap 16.0
From an advisory covering 4 CVEs
 before 2.18.8-160000.1.1
2.18.8-160000.1.1
jackson-annotations
openSUSE:Leap 16.0
From an advisory covering 3 CVEs
 before 2.18.9-160000.1.1
2.18.9-160000.1.1
jackson-core
openSUSE:Leap 16.0
From an advisory covering 3 CVEs
 before 2.18.9-160000.1.1
2.18.9-160000.1.1
jackson-databind
openSUSE:Leap 16.0
From an advisory covering 3 CVEs
 before 2.18.9-160000.1.1
2.18.9-160000.1.1

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
SourceLinkDate
PoC in GitHubxiaoqiMikko/jackson-check2026-08-07

History

History
RecordedChangedSources
affected
facts
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV, PoC in GitHub

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2026-54515 is a medium vulnerability (CVSS 5.3) in Fasterxml Jackson-databind, published June 23, 2026. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 0.44%, the 38th percentile. Fixed in com.fasterxml.jackson.core:jackson-databind 3.1.4.

References

Show 194 moreShow less
This page doesn't list everything

Left out here: 289 package rows, 371 versions and 128 references. The JSON record has them. Also not on the record: 5 aliases. ID and package lookups still check them. Left out on purpose, here and in the API, to keep responses small: 46 source records.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open