OSV-2024-245
Security exception in com.github.javaparser.ast.validator.TreeVisitorValidator.accept
No score
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=67672
Crash type: Security exception
Crash state:
com.github.javaparser.ast.validator.TreeVisitorValidator.accept
com.github.javaparser.ast.expr.FieldAccessExpr.getMetaModel
com.github.javaparser.ast.expr.FieldAccessExpr.getMetaModel
What each source reports
OSV No score
Security exception in com.github.javaparser.ast.validator.TreeVisitorValidator.accept
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=67672
Crash type: Security exception
Crash state:
com.github.javaparser.ast.validator.TreeVisitorValidator.accept
com.github.javaparser.ast.expr.FieldAccessExpr.getMetaModel
com.github.javaparser.ast.expr.FieldAccessExpr.getMetaModel
- Record
OSV-2024-245- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
jackson-databindOSS-Fuzz |
Listed versions, plus commit ranges jackson-databind-2.17.1jackson-databind-2.17.2jackson-databind-2.18.0-rc1jackson-databind-2.18.0jackson-databind-2.18.1 Show 45 moreShow lessjackson-databind-2.17.3jackson-databind-2.18.2jackson-databind-2.18.3jackson-databind-3.0.0-rc1jackson-databind-3.0.0-rc2jackson-databind-2.19.0-rc2jackson-databind-3.0.0-rc3jackson-databind-2.19.0jackson-databind-2.18.4jackson-databind-3.0.0-rc4jackson-databind-3.0.0-rc5jackson-databind-2.19.1jackson-databind-2.19.2jackson-databind-3.0.0-rc6jackson-databind-2.12.7.2jackson-databind-2.20.0jackson-databind-2.20.0-rc1jackson-databind-3.0.0-rc10jackson-databind-3.0.0-rc7jackson-databind-3.0.0-rc8jackson-databind-3.0.0-rc9jackson-databind-3.0.0jackson-databind-3.0.1jackson-databind-2.18.5jackson-databind-2.19.3jackson-databind-2.19.4jackson-databind-2.20.1jackson-databind-3.0.2jackson-databind-3.0.3jackson-databind-2.21.0jackson-databind-2.20.2jackson-databind-3.0.4jackson-databind-3.1.0-rc1jackson-databind-2.18.6jackson-databind-2.21.1jackson-databind-3.1.0jackson-databind-2.21.2jackson-databind-3.1.1jackson-databind-3.1.2jackson-databind-2.18.7jackson-databind-2.21.3jackson-databind-3.1.3jackson-databind-2.18.8jackson-databind-2.21.4jackson-databind-3.1.4 |
None known |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
OSV-2024-245 is a vulnerability with no CVSS score yet in jackson-databind, published April 8, 2024. No source lists public exploit code. No source names a fixed version.
References
This page doesn't list everything
Left out here: 22 versions. The JSON record has them.