Every CVE Search/ Get API key

CVE-2025-52999

jackson-core Has Potential for StackoverflowError if user parses an input file that contains very deeply nested data

8.7 HighPublic exploitFix available

jackson-core contains core low-level incremental ("streaming") parser and generator abstractions used by Jackson Data Processor. In versions prior to 2.15.0, if a user parses an input file and it has deeply nested data, Jackson could end up throwing a StackoverflowError if the depth is particularly large. jackson-core 2.15.0 contains a configurable limit for how deep Jackson will traverse in an input document, defaulting to an allowable depth of 1000. jackson-core will throw a StreamConstraintsException if the limit is reached. jackson-databind also benefits from this change because it uses jackson-core to parse JSON inputs. As a workaround, users should avoid parsing input files from untrusted sources.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
None
User interaction
None

What an attacker can affect

Confidentiality
None
Integrity
None
Availability
High

Exploit likelihood

0.77%Up 0.7 points since Jun 26, 2025
90%50%10%1%

What each source reports

CVE List Score used 8.7

jackson-core Has Potential for StackoverflowError if user parses an input file that contains very deeply nested data

jackson-core contains core low-level incremental ("streaming") parser and generator abstractions used by Jackson Data Processor. In versions prior to 2.15.0, if a user parses an input file and it has deeply nested data, Jackson could end up throwing a StackoverflowError if the depth is particularly large. jackson-core 2.15.0 contains a configurable limit for how deep Jackson will traverse in an input document, defaulting to an allowable depth of 1000. jackson-core will throw a StreamConstraintsException if the limit is reached. jackson-databind also benefits from this change because it uses jackson-core to parse JSON inputs. As a workaround, users should avoid parsing input files from untrusted sources.

Record
CVE-2025-52999
CVSS 4.0
8.7 HighCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
Weakness
CWE-121
Updated
2026-11-02
EUVDEUVD-2025-28482 8.7

jackson-core contains core low-level incremental ("streaming") parser and generator abstractions used by Jackson Data Processor. In versions prior to 2.15.0, if a user parses an input file and it has deeply nested data, Jackson could end up throwing a StackoverflowError if the depth is particularly large. jackson-core 2.15.0 contains a configurable limit for how deep Jackson will traverse in an input document, defaulting to an allowable depth of 1000. jackson-core will throw a StreamConstraintsException if the limit is reached. jackson-databind also benefits from this change because it uses jackson-core to parse JSON inputs. As a workaround, users should avoid parsing input files from untrusted sources.

Record
EUVD-2025-28482
CVSS 4.0
8.7 HighCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
Updated
2026-11-02
GitHub AdvisoriesGHSA-h46c-h94j-95f3 8.7

jackson-core can throw a StackoverflowError when processing deeply nested data

Impact

With older versions of jackson-core, if you parse an input file and it has deeply nested data, Jackson could end up throwing a StackoverflowError if the depth is particularly large.

Patches

jackson-core 2.15.0 contains a configurable limit for how deep Jackson will traverse in an input document, defaulting to an allowable depth of 1000. Change is in https://github.com/FasterXML/jackson-core/pull/943. jackson-core will throw a StreamConstraintsException if the limit is reached. jackson-databind also benefits from this change because it uses jackson-core to parse JSON inputs.

Workarounds

Users should avoid parsing input files from untrusted sources.

Record
GHSA-h46c-h94j-95f3
CVSS 4.0
8.7 HighCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
Weakness
CWE-121
Updated
2026-11-02
NVD 8.7

jackson-core contains core low-level incremental ("streaming") parser and generator abstractions used by Jackson Data Processor. In versions prior to 2.15.0, if a user parses an input file and it has deeply nested data, Jackson could end up throwing a StackoverflowError if the depth is particularly large. jackson-core 2.15.0 contains a configurable limit for how deep Jackson will traverse in an input document, defaulting to an allowable depth of 1000. jackson-core will throw a StreamConstraintsException if the limit is reached. jackson-databind also benefits from this change because it uses jackson-core to parse JSON inputs. As a workaround, users should avoid parsing input files from untrusted sources.

Record
CVE-2025-52999
CVSS 4.0
8.7 HighCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Weakness
CWE-121
Updated
2026-11-02
OSV 8.7

jackson-core Has Potential for StackoverflowError if user parses an input file that contains very deeply nested data

jackson-core contains core low-level incremental ("streaming") parser and generator abstractions used by Jackson Data Processor. In versions prior to 2.15.0, if a user parses an input file and it has deeply nested data, Jackson could end up throwing a StackoverflowError if the depth is particularly large. jackson-core 2.15.0 contains a configurable limit for how deep Jackson will traverse in an input document, defaulting to an allowable depth of 1000. jackson-core will throw a StreamConstraintsException if the limit is reached. jackson-databind also benefits from this change because it uses jackson-core to parse JSON inputs. As a workaround, users should avoid parsing input files from untrusted sources.

Record
CVE-2025-52999
CVSS 4.0
8.7 HighCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
Weakness
CWE-121
Updated
2026-11-02
OSVDEBIAN-CVE-2025-52999 8.7

jackson-core contains core low-level incremental ("streaming") parser and generator abstractions used by Jackson Data Processor. In versions prior to 2.15.0, if a user parses an input file and it has deeply nested data, Jackson could end up throwing a StackoverflowError if the depth is particularly large. jackson-core 2.15.0 contains a configurable limit for how deep Jackson will traverse in an input document, defaulting to an allowable depth of 1000. jackson-core will throw a StreamConstraintsException if the limit is reached. jackson-databind also benefits from this change because it uses jackson-core to parse JSON inputs. As a workaround, users should avoid parsing input files from untrusted sources.

Record
DEBIAN-CVE-2025-52999
CVSS 4.0
8.7 HighCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Updated
2026-11-02
Show 48 moreShow less
OSVGHSA-h46c-h94j-95f3 8.7

jackson-core can throw a StackoverflowError when processing deeply nested data

Impact

With older versions of jackson-core, if you parse an input file and it has deeply nested data, Jackson could end up throwing a StackoverflowError if the depth is particularly large.

Patches

jackson-core 2.15.0 contains a configurable limit for how deep Jackson will traverse in an input document, defaulting to an allowable depth of 1000. Change is in https://github.com/FasterXML/jackson-core/pull/943. jackson-core will throw a StreamConstraintsException if the limit is reached. jackson-databind also benefits from this change because it uses jackson-core to parse JSON inputs.

Workarounds

Users should avoid parsing input files from untrusted sources.

Record
GHSA-h46c-h94j-95f3
CVSS 4.0
8.7 HighCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
Weakness
CWE-121
Updated
2026-11-02
OSVRHSA-2025:10092 7.5

Red Hat Security Advisory: Red Hat Product OCP Tools 4.18 OpenShift Jenkins security update

Record
RHSA-2025:10092
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2025:10097 7.5

Red Hat Security Advisory: Red Hat Product OCP Tools 4.17 OpenShift Jenkins security update

Record
RHSA-2025:10097
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2025:10098 7.5

Red Hat Security Advisory: Red Hat Product OCP Tools 4.16 OpenShift Jenkins security update

Record
RHSA-2025:10098
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2025:10104 7.5

Red Hat Security Advisory: Red Hat Product OCP Tools 4.15 OpenShift Jenkins security update

Record
RHSA-2025:10104
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2025:10118 7.5

Red Hat Security Advisory: Red Hat Product OCP Tools 4.12 OpenShift Jenkins security update

Record
RHSA-2025:10118
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2025:10119 7.5

Red Hat Security Advisory: Red Hat Product OCP Tools 4.13 OpenShift Jenkins security update

Record
RHSA-2025:10119
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2025:10120 7.5

Red Hat Security Advisory: Red Hat Product OCP Tools 4.14 OpenShift Jenkins security update

Record
RHSA-2025:10120
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2025:11473 7.5

Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4 security update

Record
RHSA-2025:11473
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2025:12280 7.5

Red Hat Security Advisory: jackson-annotations, jackson-core, jackson-databind, jackson-jaxrs-providers, and jackson-modules-base security update

Record
RHSA-2025:12280
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2025:12281 7.5

Red Hat Security Advisory: jackson-annotations, jackson-core, jackson-databind, jackson-jaxrs-providers, and jackson-modules-base security update

Record
RHSA-2025:12281
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2025:12282 7.5

Red Hat Security Advisory: jackson-annotations, jackson-core, jackson-databind, jackson-jaxrs-providers, and jackson-modules-base security update

Record
RHSA-2025:12282
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2025:12283 7.5

Red Hat Security Advisory: jackson-annotations, jackson-core, jackson-databind, jackson-jaxrs-providers, and jackson-modules-base security update

Record
RHSA-2025:12283
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2025:14116 7.5

Red Hat Security Advisory: pki-deps:10.6 security update

Record
RHSA-2025:14116
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2025:14117 7.5

Red Hat Security Advisory: pki-deps:10.6 security update

Record
RHSA-2025:14117
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2025:14118 7.5

Red Hat Security Advisory: pki-deps:10.6 security update

Record
RHSA-2025:14118
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2025:14126 7.5

Red Hat Security Advisory: pki-deps:10.6 security update

Record
RHSA-2025:14126
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2025:14127 7.5

Red Hat Security Advisory: pki-deps:10.6 security update

Record
RHSA-2025:14127
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2026:0742 7.5

Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.1.13 on RHEL 7 security update

Record
RHSA-2026:0742
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2026:0743 7.5

Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.3.16 security update

Record
RHSA-2026:0743
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2026:4915 9.6

Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4.24 security update

Record
RHSA-2026:4915
CVSS 3.1
9.6 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:L
Updated
2026-11-02
OSVRHSA-2026:4916 9.6

Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4.24 security update

Record
RHSA-2026:4916
CVSS 3.1
9.6 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:L
Updated
2026-11-02
OSVRHSA-2026:4917 9.6

Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4.24 security update

Record
RHSA-2026:4917
CVSS 3.1
9.6 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:L
Updated
2026-11-02
OSVRLSA-2025:12280 7.5

Important: jackson-annotations, jackson-core, jackson-databind, jackson-jaxrs-providers, and jackson-modules-base security update

Core part of Jackson that defines Streaming API as well as basic shared abstractions.

Security Fix(es):

  • com.fasterxml.jackson.core/jackson-core: jackson-core Potential StackoverflowError (CVE-2025-52999)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2025:12280
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRLSA-2025:14126 7.5

Important: pki-deps:10.6 security update

The Public Key Infrastructure (PKI) Core contains fundamental packages required by Rocky Enterprise Software Foundation Certificate System.

Security Fix(es):

  • com.fasterxml.jackson.core/jackson-core: jackson-core Potential StackoverflowError (CVE-2025-52999)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2025:14126
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2025-52999 8.7

jackson-core contains core low-level incremental ("streaming") parser and generator abstractions used by Jackson Data Processor. In versions prior to 2.15.0, if a user parses an input file and it has deeply nested data, Jackson could end up throwing a StackoverflowError if the depth is particularly large. jackson-core 2.15.0 contains a configurable limit for how deep Jackson will traverse in an input document, defaulting to an allowable depth of 1000. jackson-core will throw a StreamConstraintsException if the limit is reached. jackson-databind also benefits from this change because it uses jackson-core to parse JSON inputs. As a workaround, users should avoid parsing input files from untrusted sources.

Record
UBUNTU-CVE-2025-52999
CVSS 4.0
8.7 HighCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
Updated
2026-11-02
OSVALSA-2025:12280 No score

Important: jackson-annotations, jackson-core, jackson-databind, jackson-jaxrs-providers, and jackson-modules-base security update

Core part of Jackson that defines Streaming API as well as basic shared abstractions.

Security Fix(es):

  • com.fasterxml.jackson.core/jackson-core: jackson-core Potential StackoverflowError (CVE-2025-52999)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2025:12280
Updated
2026-11-02
OSVALSA-2025:14126 No score

Important: pki-deps:10.6 security update

The Public Key Infrastructure (PKI) Core contains fundamental packages required by AlmaLinux Certificate System.

Security Fix(es):

  • com.fasterxml.jackson.core/jackson-core: jackson-core Potential StackoverflowError (CVE-2025-52999)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2025:14126
Updated
2026-11-02
OSVCLSA-2025-1764235184 No score

jackson-core: Fix of CVE-2025-52999

  • CVE-2025-52999: add StreamReadConstraints to protect against DoS attacks via deeply nested structures and oversized inputs
Record
CLSA-2025-1764235184
Updated
2026-11-02
OSVCLSA-2025-1764771605 No score

jackson-jaxrs-providers: Fix of CVE-2025-52999

  • Rebuilt with the CVE-2025-52999: fixed jackson-core version
  • Fixed build: replaced missing packages with a patch for PackageVersion
Record
CLSA-2025-1764771605
Updated
2026-11-02
OSVCLSA-2025-1764772111 No score

jackson-modules-base: Fix of CVE-2025-52999

  • Rebuilt with the CVE-2025-52999: fixed jackson-core version
  • Fixed build: replaced missing packages with a patch for PackageVersion
Record
CLSA-2025-1764772111
Updated
2026-11-02
OSVCLSA-2025-1764847045 No score

jackson-annotations: Fix of CVE-2025-52999

  • Rebuilt with the CVE-2025-52999: fixed jackson-core version
  • Fixed build: removed unavailable jackson-parent dependencies
Record
CLSA-2025-1764847045
Updated
2026-11-02
OSVCLSA-2025-1764858279 No score

jackson-databind: Fix of 2 CVEs

  • Removed CVE-2020-36518.patch: jackson-databind 2.14.1-1 is not affected
  • Rebuilt with the CVE-2025-52999: fixed jackson-core version
Record
CLSA-2025-1764858279
Updated
2026-11-02
OSVCLSA-2026-1776386157 No score

TuxCare security update for com.fasterxml.jackson.core:jackson-core (3 CVEs)

TuxCare rebuilt com.fasterxml.jackson.core:jackson-core to address 3 CVEs. Fixed in 2.12.1-tuxcare.1.

Record
CLSA-2026-1776386157
Updated
2026-11-02
OSVCLSA-2026-1777941827 No score

TuxCare security update for com.fasterxml.jackson.core:jackson-core (1 CVE)

TuxCare rebuilt com.fasterxml.jackson.core:jackson-core to address 1 CVE. Fixed in 2.14.2-tuxcare.1.

Record
CLSA-2026-1777941827
Updated
2026-11-02
OSVCLSA-2026-1788351524 No score

TuxCare security update for com.fasterxml.jackson.core:jackson-core (1 CVE)

TuxCare rebuilt com.fasterxml.jackson.core:jackson-core to address 1 CVE. Fixed in 2.14.1-tuxcare.1.

Record
CLSA-2026-1788351524
Updated
2026-11-02
OSVCLSA-2026-1792399331 No score

TuxCare security update for com.fasterxml.jackson.core:jackson-core (2 CVEs)

TuxCare rebuilt com.fasterxml.jackson.core:jackson-core to address 2 CVEs. Fixed in 2.6.7-tuxcare.1.

Record
CLSA-2026-1792399331
Updated
2026-11-02
OSVCLSA-2026-1792399344 No score

TuxCare security update for com.fasterxml.jackson.core:jackson-core (2 CVEs)

TuxCare rebuilt com.fasterxml.jackson.core:jackson-core to address 2 CVEs. Fixed in 2.9.8-tuxcare.1.

Record
CLSA-2026-1792399344
Updated
2026-11-02
OSVCLSA-2026-1792399348 No score

TuxCare security update for com.fasterxml.jackson.core:jackson-core (2 CVEs)

TuxCare rebuilt com.fasterxml.jackson.core:jackson-core to address 2 CVEs. Fixed in 2.9.9-tuxcare.1.

Record
CLSA-2026-1792399348
Updated
2026-11-02
OSVCLSA-2026-1792399394 No score

TuxCare security update for com.fasterxml.jackson.core:jackson-core (2 CVEs)

TuxCare rebuilt com.fasterxml.jackson.core:jackson-core to address 2 CVEs. Fixed in 2.2.3-tuxcare.1.

Record
CLSA-2026-1792399394
Updated
2026-11-02
OSVCLSA-2026-1792399424 No score

TuxCare security update for com.fasterxml.jackson.core:jackson-core (2 CVEs)

TuxCare rebuilt com.fasterxml.jackson.core:jackson-core to address 2 CVEs. Fixed in 2.9.10-tuxcare.1.

Record
CLSA-2026-1792399424
Updated
2026-11-02
OSVCLSA-2026-1792399460 No score

TuxCare security update for com.fasterxml.jackson.core:jackson-core (6 CVEs)

TuxCare rebuilt com.fasterxml.jackson.core:jackson-core to address 6 CVEs. Fixed in 2.13.2-tuxcare.1.

Record
CLSA-2026-1792399460
Updated
2026-11-02
OSVCLSA-2026-1792399472 No score

TuxCare security update for com.fasterxml.jackson.core:jackson-core (6 CVEs)

TuxCare rebuilt com.fasterxml.jackson.core:jackson-core to address 6 CVEs. Fixed in 2.13.4-tuxcare.1.

Record
CLSA-2026-1792399472
Updated
2026-11-02
OSVCLSA-2026-1792416889 No score

TuxCare security update for com.fasterxml.jackson.core:jackson-core (2 CVEs)

TuxCare rebuilt com.fasterxml.jackson.core:jackson-core to address 2 CVEs. Fixed in 2.1.3-tuxcare.1.

Record
CLSA-2026-1792416889
Updated
2026-11-02
OSVCLSA-2026-1792427235 No score

TuxCare security update for com.fasterxml.jackson.core:jackson-core (2 CVEs)

TuxCare rebuilt com.fasterxml.jackson.core:jackson-core to address 2 CVEs. Fixed in 2.6.0-tuxcare.1.

Record
CLSA-2026-1792427235
Updated
2026-11-02
OSVCLSA-2026-1792427260 No score

TuxCare security update for com.fasterxml.jackson.core:jackson-core (2 CVEs)

TuxCare rebuilt com.fasterxml.jackson.core:jackson-core to address 2 CVEs. Fixed in 2.7.0-tuxcare.1.

Record
CLSA-2026-1792427260
Updated
2026-11-02
OSVCLSA-2026-1792428179 No score

TuxCare security update for com.fasterxml.jackson.core:jackson-core (2 CVEs)

TuxCare rebuilt com.fasterxml.jackson.core:jackson-core to address 2 CVEs. Fixed in 2.7.9-tuxcare.1.

Record
CLSA-2026-1792428179
Updated
2026-11-02
OSVCLSA-2026-1792428196 No score

TuxCare security update for com.fasterxml.jackson.core:jackson-core (2 CVEs)

TuxCare rebuilt com.fasterxml.jackson.core:jackson-core to address 2 CVEs. Fixed in 2.7.4-tuxcare.1.

Record
CLSA-2026-1792428196
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
com.fasterxml.jackson.core:jackson-core
Maven
 before 2.15.0
2.15.0
pki-jackson-annotations
AlmaLinux:9
 before 2.19.1-1.el9_6
2.19.1-1.el9_6
pki-jackson-core
AlmaLinux:9
 before 2.19.1-1.el9_6
2.19.1-1.el9_6
pki-jackson-databind
AlmaLinux:9
 before 2.19.1-1.el9_6
2.19.1-1.el9_6
pki-jackson-jaxrs-json-provider
AlmaLinux:9
 before 2.19.1-1.el9_6
2.19.1-1.el9_6
pki-jackson-jaxrs-providers
AlmaLinux:9
 before 2.19.1-1.el9_6
2.19.1-1.el9_6
pki-jackson-module-jaxb-annotations
AlmaLinux:9
 before 2.19.1-1.el9_6
2.19.1-1.el9_6
apache-commons-collections
AlmaLinux:8
 before 3.2.2-10.module_el8.5.0+2577+9e95fe00
3.2.2-10.module_el8.5.0+2577+9e95fe00
apache-commons-lang
AlmaLinux:8
 before 2.6-21.module_el8.5.0+2577+9e95fe00
2.6-21.module_el8.5.0+2577+9e95fe00
apache-commons-net
AlmaLinux:8
 before 3.6-3.module_el8.5.0+2577+9e95fe00
3.6-3.module_el8.5.0+2577+9e95fe00
Show 290 moreShow less
Affected packages
PackageAffectedFixed
bea-stax-api
AlmaLinux:8
 before 1.2.0-16.module_el8.5.0+2577+9e95fe00
1.2.0-16.module_el8.5.0+2577+9e95fe00
fasterxml-oss-parent
AlmaLinux:8
 before 69-1.module_el8.10.0+4034+20822525
69-1.module_el8.10.0+4034+20822525
glassfish-fastinfoset
AlmaLinux:8
 before 1.2.13-9.module_el8.5.0+2577+9e95fe00
1.2.13-9.module_el8.5.0+2577+9e95fe00
glassfish-jaxb-api
AlmaLinux:8
 before 2.2.12-8.module_el8.5.0+2577+9e95fe00
2.2.12-8.module_el8.5.0+2577+9e95fe00
glassfish-jaxb-core
AlmaLinux:8
 before 2.2.11-12.module_el8.10.0+3791+e0637953
2.2.11-12.module_el8.10.0+3791+e0637953
glassfish-jaxb-runtime
AlmaLinux:8
 before 2.2.11-12.module_el8.10.0+3791+e0637953
2.2.11-12.module_el8.10.0+3791+e0637953
glassfish-jaxb-txw2
AlmaLinux:8
 before 2.2.11-12.module_el8.10.0+3791+e0637953
2.2.11-12.module_el8.10.0+3791+e0637953
jackson-annotations
AlmaLinux:8
 before 2.19.1-1.module_el8.10.0+4034+20822525
2.19.1-1.module_el8.10.0+4034+20822525
jackson-bom
AlmaLinux:8
 before 2.19.1-1.module_el8.10.0+4034+20822525
2.19.1-1.module_el8.10.0+4034+20822525
jackson-core
AlmaLinux:8
 before 2.19.1-1.module_el8.10.0+4034+20822525
2.19.1-1.module_el8.10.0+4034+20822525
jackson-databind
AlmaLinux:8
 before 2.19.1-1.module_el8.10.0+4034+20822525
2.19.1-1.module_el8.10.0+4034+20822525
jackson-jaxrs-json-provider
AlmaLinux:8
 before 2.19.1-1.module_el8.10.0+4034+20822525
2.19.1-1.module_el8.10.0+4034+20822525
jackson-jaxrs-providers
AlmaLinux:8
 before 2.19.1-1.module_el8.10.0+4034+20822525
2.19.1-1.module_el8.10.0+4034+20822525
jackson-module-jaxb-annotations
AlmaLinux:8
 before 2.19.1-1.module_el8.10.0+4034+20822525
2.19.1-1.module_el8.10.0+4034+20822525
jackson-modules-base
AlmaLinux:8
 before 2.19.1-1.module_el8.10.0+4034+20822525
2.19.1-1.module_el8.10.0+4034+20822525
jackson-parent
AlmaLinux:8
 before 2.19.1-1.module_el8.10.0+4034+20822525
2.19.1-1.module_el8.10.0+4034+20822525
jakarta-commons-httpclient
AlmaLinux:8
 before 1:3.1-28.module_el8.5.0+2577+9e95fe00
1:3.1-28.module_el8.5.0+2577+9e95fe00
javassist
AlmaLinux:8
 before 3.18.1-8.module_el8.5.0+2577+9e95fe00
3.18.1-8.module_el8.5.0+2577+9e95fe00
javassist-javadoc
AlmaLinux:8
 before 3.18.1-8.module_el8.5.0+2577+9e95fe00
3.18.1-8.module_el8.5.0+2577+9e95fe00
pki-servlet-engine
AlmaLinux:8
 before 1:9.0.62-1.module_el8.10.0+3791+e0637953
1:9.0.62-1.module_el8.10.0+3791+e0637953
relaxngDatatype
AlmaLinux:8
 before 2011.1-7.module_el8.5.0+2577+9e95fe00
2011.1-7.module_el8.5.0+2577+9e95fe00
slf4j
AlmaLinux:8
 before 1.7.25-4.module_el8.5.0+2577+9e95fe00
1.7.25-4.module_el8.5.0+2577+9e95fe00
slf4j-jdk14
AlmaLinux:8
 before 1.7.25-4.module_el8.5.0+2577+9e95fe00
1.7.25-4.module_el8.5.0+2577+9e95fe00
stax-ex
AlmaLinux:8
 before 1.7.7-8.module_el8.5.0+2577+9e95fe00
1.7.7-8.module_el8.5.0+2577+9e95fe00
velocity
AlmaLinux:8
 before 1.7-24.module_el8.5.0+2577+9e95fe00
1.7-24.module_el8.5.0+2577+9e95fe00
xalan-j2
AlmaLinux:8
 before 2.7.1-38.module_el8.5.0+2577+9e95fe00
2.7.1-38.module_el8.5.0+2577+9e95fe00
xerces-j2
AlmaLinux:8
 before 2.11.0-34.module_el8.5.0+2577+9e95fe00
2.11.0-34.module_el8.5.0+2577+9e95fe00
xml-commons-apis
AlmaLinux:8
 before 1.4.01-25.module_el8.5.0+2577+9e95fe00
1.4.01-25.module_el8.5.0+2577+9e95fe00
xml-commons-resolver
AlmaLinux:8
 before 1.2-26.module_el8.5.0+2577+9e95fe00
1.2-26.module_el8.5.0+2577+9e95fe00
xmlstreambuffer
AlmaLinux:8
 before 1.5.4-8.module_el8.5.0+2577+9e95fe00
1.5.4-8.module_el8.5.0+2577+9e95fe00
xsom
AlmaLinux:8
 before 0-19.20110809svn.module_el8.5.0+2577+9e95fe00
0-19.20110809svn.module_el8.5.0+2577+9e95fe00
pki-jackson-core
TuxCare:AlmaLinux:9.2
 before 2.14.1-2.el9.tuxcare.els1
2.14.1-2.el9.tuxcare.els1
pki-jackson-jaxrs-json-provider
TuxCare:AlmaLinux:9.2
 before 2.14.1-2.el9.tuxcare.els1
2.14.1-2.el9.tuxcare.els1
pki-jackson-jaxrs-providers
TuxCare:AlmaLinux:9.2
 before 2.14.1-2.el9.tuxcare.els1
2.14.1-2.el9.tuxcare.els1
pki-jackson-jaxrs-providers-datatypes
TuxCare:AlmaLinux:9.2
 before 2.14.1-2.el9.tuxcare.els1
2.14.1-2.el9.tuxcare.els1
pki-jackson-jaxrs-providers-javadoc
TuxCare:AlmaLinux:9.2
 before 2.14.1-2.el9.tuxcare.els1
2.14.1-2.el9.tuxcare.els1
pki-jackson-jaxrs-providers-parent
TuxCare:AlmaLinux:9.2
 before 2.14.1-2.el9.tuxcare.els1
2.14.1-2.el9.tuxcare.els1
pki-jackson-module-jaxb-annotations
TuxCare:AlmaLinux:9.2
 before 2.14.1-2.el9.tuxcare.els1
2.14.1-2.el9.tuxcare.els1
pki-jackson-modules-base
TuxCare:AlmaLinux:9.2
 before 2.14.1-2.el9.tuxcare.els1
2.14.1-2.el9.tuxcare.els1
pki-jackson-annotations
TuxCare:AlmaLinux:9.2
 before 2.14.1-1.el9.tuxcare.els1
2.14.1-1.el9.tuxcare.els1
pki-jackson-annotations-javadoc
TuxCare:AlmaLinux:9.2
 before 2.14.1-1.el9.tuxcare.els1
2.14.1-1.el9.tuxcare.els1
pki-jackson-databind
TuxCare:AlmaLinux:9.2
From an advisory covering 2 CVEs
 before 2.14.1-2.el9.tuxcare.els2
2.14.1-2.el9.tuxcare.els2
com.fasterxml.jackson.core:jackson-core
TuxCare:Maven
From an advisory covering 2 CVEs
 2.12.1 up to 2.12.1-tuxcare.1
2.12.1-tuxcare.1
com.fasterxml.jackson.core:jackson-core
TuxCare:Maven
 2.14.2 up to 2.14.2-tuxcare.1
2.14.2-tuxcare.1
com.fasterxml.jackson.core:jackson-core
TuxCare:Maven
 2.14.1 up to 2.14.1-tuxcare.1
2.14.1-tuxcare.1
com.fasterxml.jackson.core:jackson-core
TuxCare:Maven
From an advisory covering 2 CVEs
 2.6.7 up to 2.6.7-tuxcare.1
2.6.7-tuxcare.1
com.fasterxml.jackson.core:jackson-core
TuxCare:Maven
From an advisory covering 2 CVEs
 2.9.8 up to 2.9.8-tuxcare.1
2.9.8-tuxcare.1
com.fasterxml.jackson.core:jackson-core
TuxCare:Maven
From an advisory covering 2 CVEs
 2.9.9 up to 2.9.9-tuxcare.1
2.9.9-tuxcare.1
com.fasterxml.jackson.core:jackson-core
TuxCare:Maven
From an advisory covering 2 CVEs
 2.2.3 up to 2.2.3-tuxcare.1
2.2.3-tuxcare.1
com.fasterxml.jackson.core:jackson-core
TuxCare:Maven
From an advisory covering 2 CVEs
 2.9.10 up to 2.9.10-tuxcare.1
2.9.10-tuxcare.1
com.fasterxml.jackson.core:jackson-core
TuxCare:Maven
From an advisory covering 3 CVEs
 2.13.2 up to 2.13.2-tuxcare.1
2.13.2-tuxcare.1
com.fasterxml.jackson.core:jackson-core
TuxCare:Maven
From an advisory covering 3 CVEs
 2.13.4 up to 2.13.4-tuxcare.1
2.13.4-tuxcare.1
com.fasterxml.jackson.core:jackson-core
TuxCare:Maven
From an advisory covering 2 CVEs
 2.1.3 up to 2.1.3-tuxcare.1
2.1.3-tuxcare.1
com.fasterxml.jackson.core:jackson-core
TuxCare:Maven
From an advisory covering 2 CVEs
 2.6.0 up to 2.6.0-tuxcare.1
2.6.0-tuxcare.1
com.fasterxml.jackson.core:jackson-core
TuxCare:Maven
From an advisory covering 2 CVEs
 2.7.0 up to 2.7.0-tuxcare.1
2.7.0-tuxcare.1
com.fasterxml.jackson.core:jackson-core
TuxCare:Maven
From an advisory covering 2 CVEs
 2.7.9 up to 2.7.9-tuxcare.1
2.7.9-tuxcare.1
com.fasterxml.jackson.core:jackson-core
TuxCare:Maven
From an advisory covering 2 CVEs
 2.7.4 up to 2.7.4-tuxcare.1
2.7.4-tuxcare.1
com.fasterxml.jackson.core:jackson-core
TuxCare:Maven
From an advisory covering 2 CVEs
 2.7.8 up to 2.7.8-tuxcare.1
2.7.8-tuxcare.1
com.fasterxml.jackson.core:jackson-core
TuxCare:Maven
From an advisory covering 2 CVEs
 2.8.8 up to 2.8.8-tuxcare.1
2.8.8-tuxcare.1
com.fasterxml.jackson.core:jackson-core
TuxCare:Maven
From an advisory covering 2 CVEs
 2.8.11 up to 2.8.11-tuxcare.1
2.8.11-tuxcare.1
com.fasterxml.jackson.core:jackson-core
TuxCare:Maven
From an advisory covering 2 CVEs
 2.9.6 up to 2.9.6-tuxcare.1
2.9.6-tuxcare.1
com.fasterxml.jackson.core:jackson-core
TuxCare:Maven
From an advisory covering 2 CVEs
 2.13.3 up to 2.13.3-tuxcare.1
2.13.3-tuxcare.1
com.fasterxml.jackson.core:jackson-core
TuxCare:Maven
From an advisory covering 2 CVEs
 2.4.0 up to 2.4.0-tuxcare.1
2.4.0-tuxcare.1
com.fasterxml.jackson.core:jackson-core
TuxCare:Maven
From an advisory covering 2 CVEs
 2.13.5 up to 2.13.5-tuxcare.1
2.13.5-tuxcare.1
com.fasterxml.jackson.core:jackson-core
TuxCare:Maven
 2.12.7 up to 2.12.7-tuxcare.2, plus listed versions
2.12.7-tuxcare.1
2.12.7-tuxcare.2
com.fasterxml.jackson.core:jackson-core
TuxCare:Maven
From an advisory covering 2 CVEs
 2.9.3 up to 2.9.3-tuxcare.1
2.9.3-tuxcare.1
com.fasterxml.jackson.core:jackson-core
TuxCare:Maven
 2.10.0 up to 2.10.0-tuxcare.2, plus listed versions
2.10.0-tuxcare.1
2.10.0-tuxcare.2
com.fasterxml.jackson.core:jackson-core
TuxCare:Maven
From an advisory covering 2 CVEs
 2.8.7 up to 2.8.7-tuxcare.1
2.8.7-tuxcare.1
com.fasterxml.jackson.core:jackson-core
TuxCare:Maven
 2.12.6 up to 2.12.6-tuxcare.2, plus listed versions
2.12.6-tuxcare.1
2.12.6-tuxcare.2
com.fasterxml.jackson.core:jackson-core
TuxCare:Maven
 2.12.3 up to 2.12.3-tuxcare.2, plus listed versions
2.12.3-tuxcare.1
2.12.3-tuxcare.2
com.fasterxml.jackson.core:jackson-core
TuxCare:Maven
 2.12.2 up to 2.12.2-tuxcare.2, plus listed versions
2.12.2-tuxcare.1
2.12.2-tuxcare.2
jackson-core
Debian:12
 before 2.14.1-2~deb12u1, plus listed versions
2.14.1-12.14.1-2~deb11u1
2.14.1-2~deb12u1
jackson-core
Debian:13
 before 2.14.1-2~deb13u1, plus listed versions
2.14.1-12.14.1-2~deb11u12.14.1-2~deb12u1
2.14.1-2~deb13u1
jackson-core
Debian:14
 before 2.14.1-2, plus listed versions
2.14.1-12.14.1-2~deb11u12.14.1-2~deb12u12.14.1-2~deb13u1
2.14.1-2
com.fasterxml.jackson.core:jackson-core
Maven
 before 2.15.0, plus listed versions
2.0.02.0.0-RC12.0.0-RC22.0.0-RC32.0.1
Show 45 moreShow less
2.0.22.0.42.0.52.0.62.1.02.1.12.1.22.1.32.1.42.1.52.10.02.10.0.pr12.10.0.pr22.10.0.pr32.10.12.10.22.10.32.10.42.10.52.11.02.11.0.rc12.11.12.11.22.11.32.11.42.12.02.12.0-rc12.12.0-rc22.12.12.12.22.12.32.12.42.12.52.12.62.12.72.13.02.13.0-rc12.13.0-rc22.13.12.13.22.13.32.13.42.13.52.14.02.14.0-rc1
2.15.0
jenkins
Red Hat:ocp_tools:4.18::el9
From an advisory covering 4 CVEs
 before 0:2.504.2.1750846524-3.el9
0:2.504.2.1750846524-3.el9
jenkins-2-plugins
Red Hat:ocp_tools:4.18::el9
From an advisory covering 4 CVEs
 before 0:4.18.1750846854-1.el9
0:4.18.1750846854-1.el9
jenkins
Red Hat:ocp_tools:4.17::el9
From an advisory covering 4 CVEs
 before 0:2.504.2.1750851690-3.el9
0:2.504.2.1750851690-3.el9
jenkins-2-plugins
Red Hat:ocp_tools:4.17::el9
From an advisory covering 4 CVEs
 before 0:4.17.1750851950-1.el9
0:4.17.1750851950-1.el9
jenkins
Red Hat:ocp_tools:4.16::el9
From an advisory covering 4 CVEs
 before 0:2.504.2.1750857144-3.el9
0:2.504.2.1750857144-3.el9
jenkins-2-plugins
Red Hat:ocp_tools:4.16::el9
From an advisory covering 4 CVEs
 before 0:4.16.1750857315-1.el9
0:4.16.1750857315-1.el9
jenkins
Red Hat:ocp_tools:4.15::el8
From an advisory covering 4 CVEs
 before 0:2.504.2.1750856366-3.el8
0:2.504.2.1750856366-3.el8
jenkins-2-plugins
Red Hat:ocp_tools:4.15::el8
From an advisory covering 4 CVEs
 before 0:4.15.1750856638-1.el8
0:4.15.1750856638-1.el8
jenkins
Red Hat:ocp_tools:4.12::el8
From an advisory covering 4 CVEs
 before 0:2.504.2.1750932984-3.el8
0:2.504.2.1750932984-3.el8
jenkins-2-plugins
Red Hat:ocp_tools:4.12::el8
From an advisory covering 4 CVEs
 before 0:4.12.1750933270-1.el8
0:4.12.1750933270-1.el8
jenkins
Red Hat:ocp_tools:4.13::el8
From an advisory covering 4 CVEs
 before 0:2.504.2.1750916374-3.el8
0:2.504.2.1750916374-3.el8
jenkins-2-plugins
Red Hat:ocp_tools:4.13::el8
From an advisory covering 4 CVEs
 before 0:4.13.1750916671-1.el8
0:4.13.1750916671-1.el8
jenkins
Red Hat:ocp_tools:4.14::el8
From an advisory covering 4 CVEs
 before 0:2.504.2.1750903189-3.el8
0:2.504.2.1750903189-3.el8
jenkins-2-plugins
Red Hat:ocp_tools:4.14::el8
From an advisory covering 4 CVEs
 before 0:4.14.1750903529-1.el8
0:4.14.1750903529-1.el8
eap7-jackson-annotations
Red Hat:jboss_enterprise_application_platform:7.4::el7
 before 0:2.12.7-2.redhat_00004.1.el7eap
0:2.12.7-2.redhat_00004.1.el7eap
eap7-jackson-core
Red Hat:jboss_enterprise_application_platform:7.4::el7
 before 0:2.12.7-2.SP1_redhat_00001.1.el7eap
0:2.12.7-2.SP1_redhat_00001.1.el7eap
eap7-jackson-databind
Red Hat:jboss_enterprise_application_platform:7.4::el7
 before 0:2.12.7-2.redhat_00004.1.el7eap
0:2.12.7-2.redhat_00004.1.el7eap
eap7-jackson-datatype-jdk8
Red Hat:jboss_enterprise_application_platform:7.4::el7
 before 0:2.12.7-2.redhat_00004.1.el7eap
0:2.12.7-2.redhat_00004.1.el7eap
eap7-jackson-datatype-jsr310
Red Hat:jboss_enterprise_application_platform:7.4::el7
 before 0:2.12.7-2.redhat_00004.1.el7eap
0:2.12.7-2.redhat_00004.1.el7eap
eap7-jackson-jaxrs-base
Red Hat:jboss_enterprise_application_platform:7.4::el7
 before 0:2.12.7-2.redhat_00004.1.el7eap
0:2.12.7-2.redhat_00004.1.el7eap
eap7-jackson-jaxrs-json-provider
Red Hat:jboss_enterprise_application_platform:7.4::el7
 before 0:2.12.7-2.redhat_00004.1.el7eap
0:2.12.7-2.redhat_00004.1.el7eap
eap7-jackson-jaxrs-providers
Red Hat:jboss_enterprise_application_platform:7.4::el7
 before 0:2.12.7-2.redhat_00004.1.el7eap
0:2.12.7-2.redhat_00004.1.el7eap
eap7-jackson-module-jaxb-annotations
Red Hat:jboss_enterprise_application_platform:7.4::el7
 before 0:2.12.7-2.redhat_00004.1.el7eap
0:2.12.7-2.redhat_00004.1.el7eap
eap7-jackson-modules-base
Red Hat:jboss_enterprise_application_platform:7.4::el7
 before 0:2.12.7-2.redhat_00004.1.el7eap
0:2.12.7-2.redhat_00004.1.el7eap
eap7-jackson-modules-java8
Red Hat:jboss_enterprise_application_platform:7.4::el7
 before 0:2.12.7-2.redhat_00004.1.el7eap
0:2.12.7-2.redhat_00004.1.el7eap
eap7-wildfly
Red Hat:jboss_enterprise_application_platform:7.4::el7
 before 0:7.4.23-4.GA_redhat_00003.1.el7eap
0:7.4.23-4.GA_redhat_00003.1.el7eap
eap7-wildfly-java-jdk11
Red Hat:jboss_enterprise_application_platform:7.4::el7
 before 0:7.4.23-4.GA_redhat_00003.1.el7eap
0:7.4.23-4.GA_redhat_00003.1.el7eap
eap7-wildfly-java-jdk8
Red Hat:jboss_enterprise_application_platform:7.4::el7
 before 0:7.4.23-4.GA_redhat_00003.1.el7eap
0:7.4.23-4.GA_redhat_00003.1.el7eap
eap7-wildfly-javadocs
Red Hat:jboss_enterprise_application_platform:7.4::el7
 before 0:7.4.23-4.GA_redhat_00003.1.el7eap
0:7.4.23-4.GA_redhat_00003.1.el7eap
eap7-wildfly-modules
Red Hat:jboss_enterprise_application_platform:7.4::el7
 before 0:7.4.23-4.GA_redhat_00003.1.el7eap
0:7.4.23-4.GA_redhat_00003.1.el7eap
eap7-jackson-annotations
Red Hat:jboss_enterprise_application_platform:7.4::el8
 before 0:2.12.7-2.redhat_00004.1.el8eap
0:2.12.7-2.redhat_00004.1.el8eap
eap7-jackson-core
Red Hat:jboss_enterprise_application_platform:7.4::el8
 before 0:2.12.7-2.SP1_redhat_00001.1.el8eap
0:2.12.7-2.SP1_redhat_00001.1.el8eap
eap7-jackson-databind
Red Hat:jboss_enterprise_application_platform:7.4::el8
 before 0:2.12.7-2.redhat_00004.1.el8eap
0:2.12.7-2.redhat_00004.1.el8eap
eap7-jackson-datatype-jdk8
Red Hat:jboss_enterprise_application_platform:7.4::el8
 before 0:2.12.7-2.redhat_00004.1.el8eap
0:2.12.7-2.redhat_00004.1.el8eap
eap7-jackson-datatype-jsr310
Red Hat:jboss_enterprise_application_platform:7.4::el8
 before 0:2.12.7-2.redhat_00004.1.el8eap
0:2.12.7-2.redhat_00004.1.el8eap
eap7-jackson-jaxrs-base
Red Hat:jboss_enterprise_application_platform:7.4::el8
 before 0:2.12.7-2.redhat_00004.1.el8eap
0:2.12.7-2.redhat_00004.1.el8eap
eap7-jackson-jaxrs-json-provider
Red Hat:jboss_enterprise_application_platform:7.4::el8
 before 0:2.12.7-2.redhat_00004.1.el8eap
0:2.12.7-2.redhat_00004.1.el8eap
eap7-jackson-jaxrs-providers
Red Hat:jboss_enterprise_application_platform:7.4::el8
 before 0:2.12.7-2.redhat_00004.1.el8eap
0:2.12.7-2.redhat_00004.1.el8eap
eap7-jackson-module-jaxb-annotations
Red Hat:jboss_enterprise_application_platform:7.4::el8
 before 0:2.12.7-2.redhat_00004.1.el8eap
0:2.12.7-2.redhat_00004.1.el8eap
eap7-jackson-modules-base
Red Hat:jboss_enterprise_application_platform:7.4::el8
 before 0:2.12.7-2.redhat_00004.1.el8eap
0:2.12.7-2.redhat_00004.1.el8eap
eap7-jackson-modules-java8
Red Hat:jboss_enterprise_application_platform:7.4::el8
 before 0:2.12.7-2.redhat_00004.1.el8eap
0:2.12.7-2.redhat_00004.1.el8eap
eap7-wildfly
Red Hat:jboss_enterprise_application_platform:7.4::el8
 before 0:7.4.23-4.GA_redhat_00003.1.el8eap
0:7.4.23-4.GA_redhat_00003.1.el8eap
eap7-wildfly-java-jdk11
Red Hat:jboss_enterprise_application_platform:7.4::el8
 before 0:7.4.23-4.GA_redhat_00003.1.el8eap
0:7.4.23-4.GA_redhat_00003.1.el8eap
eap7-wildfly-java-jdk17
Red Hat:jboss_enterprise_application_platform:7.4::el8
 before 0:7.4.23-4.GA_redhat_00003.1.el8eap
0:7.4.23-4.GA_redhat_00003.1.el8eap
eap7-wildfly-java-jdk8
Red Hat:jboss_enterprise_application_platform:7.4::el8
 before 0:7.4.23-4.GA_redhat_00003.1.el8eap
0:7.4.23-4.GA_redhat_00003.1.el8eap
eap7-wildfly-javadocs
Red Hat:jboss_enterprise_application_platform:7.4::el8
 before 0:7.4.23-4.GA_redhat_00003.1.el8eap
0:7.4.23-4.GA_redhat_00003.1.el8eap
eap7-wildfly-modules
Red Hat:jboss_enterprise_application_platform:7.4::el8
 before 0:7.4.23-4.GA_redhat_00003.1.el8eap
0:7.4.23-4.GA_redhat_00003.1.el8eap
eap7-jackson-annotations
Red Hat:jboss_enterprise_application_platform:7.4::el9
 before 0:2.12.7-2.redhat_00004.1.el9eap
0:2.12.7-2.redhat_00004.1.el9eap
eap7-jackson-core
Red Hat:jboss_enterprise_application_platform:7.4::el9
 before 0:2.12.7-2.SP1_redhat_00001.1.el9eap
0:2.12.7-2.SP1_redhat_00001.1.el9eap
eap7-jackson-databind
Red Hat:jboss_enterprise_application_platform:7.4::el9
 before 0:2.12.7-2.redhat_00004.1.el9eap
0:2.12.7-2.redhat_00004.1.el9eap
eap7-jackson-datatype-jdk8
Red Hat:jboss_enterprise_application_platform:7.4::el9
 before 0:2.12.7-2.redhat_00004.1.el9eap
0:2.12.7-2.redhat_00004.1.el9eap
eap7-jackson-datatype-jsr310
Red Hat:jboss_enterprise_application_platform:7.4::el9
 before 0:2.12.7-2.redhat_00004.1.el9eap
0:2.12.7-2.redhat_00004.1.el9eap
eap7-jackson-jaxrs-base
Red Hat:jboss_enterprise_application_platform:7.4::el9
 before 0:2.12.7-2.redhat_00004.1.el9eap
0:2.12.7-2.redhat_00004.1.el9eap
eap7-jackson-jaxrs-json-provider
Red Hat:jboss_enterprise_application_platform:7.4::el9
 before 0:2.12.7-2.redhat_00004.1.el9eap
0:2.12.7-2.redhat_00004.1.el9eap
eap7-jackson-jaxrs-providers
Red Hat:jboss_enterprise_application_platform:7.4::el9
 before 0:2.12.7-2.redhat_00004.1.el9eap
0:2.12.7-2.redhat_00004.1.el9eap
eap7-jackson-module-jaxb-annotations
Red Hat:jboss_enterprise_application_platform:7.4::el9
 before 0:2.12.7-2.redhat_00004.1.el9eap
0:2.12.7-2.redhat_00004.1.el9eap
eap7-jackson-modules-base
Red Hat:jboss_enterprise_application_platform:7.4::el9
 before 0:2.12.7-2.redhat_00004.1.el9eap
0:2.12.7-2.redhat_00004.1.el9eap
eap7-jackson-modules-java8
Red Hat:jboss_enterprise_application_platform:7.4::el9
 before 0:2.12.7-2.redhat_00004.1.el9eap
0:2.12.7-2.redhat_00004.1.el9eap
eap7-wildfly
Red Hat:jboss_enterprise_application_platform:7.4::el9
 before 0:7.4.23-4.GA_redhat_00003.1.el9eap
0:7.4.23-4.GA_redhat_00003.1.el9eap
eap7-wildfly-java-jdk11
Red Hat:jboss_enterprise_application_platform:7.4::el9
 before 0:7.4.23-4.GA_redhat_00003.1.el9eap
0:7.4.23-4.GA_redhat_00003.1.el9eap
eap7-wildfly-java-jdk17
Red Hat:jboss_enterprise_application_platform:7.4::el9
 before 0:7.4.23-4.GA_redhat_00003.1.el9eap
0:7.4.23-4.GA_redhat_00003.1.el9eap
eap7-wildfly-java-jdk8
Red Hat:jboss_enterprise_application_platform:7.4::el9
 before 0:7.4.23-4.GA_redhat_00003.1.el9eap
0:7.4.23-4.GA_redhat_00003.1.el9eap
eap7-wildfly-javadocs
Red Hat:jboss_enterprise_application_platform:7.4::el9
 before 0:7.4.23-4.GA_redhat_00003.1.el9eap
0:7.4.23-4.GA_redhat_00003.1.el9eap
eap7-wildfly-modules
Red Hat:jboss_enterprise_application_platform:7.4::el9
 before 0:7.4.23-4.GA_redhat_00003.1.el9eap
0:7.4.23-4.GA_redhat_00003.1.el9eap
jackson-annotations
Red Hat:enterprise_linux:9::appstream
 before 0:2.19.1-1.el9_6
0:2.19.1-1.el9_6
jackson-core
Red Hat:enterprise_linux:9::appstream
 before 0:2.19.1-1.el9_6
0:2.19.1-1.el9_6
jackson-databind
Red Hat:enterprise_linux:9::appstream
 before 0:2.19.1-1.el9_6
0:2.19.1-1.el9_6
jackson-jaxrs-providers
Red Hat:enterprise_linux:9::appstream
 before 0:2.19.1-1.el9_6
0:2.19.1-1.el9_6
jackson-modules-base
Red Hat:enterprise_linux:9::appstream
 before 0:2.19.1-1.el9_6
0:2.19.1-1.el9_6
pki-jackson-annotations
Red Hat:enterprise_linux:9::appstream
 before 0:2.19.1-1.el9_6
0:2.19.1-1.el9_6
pki-jackson-core
Red Hat:enterprise_linux:9::appstream
 before 0:2.19.1-1.el9_6
0:2.19.1-1.el9_6
pki-jackson-databind
Red Hat:enterprise_linux:9::appstream
 before 0:2.19.1-1.el9_6
0:2.19.1-1.el9_6
pki-jackson-jaxrs-json-provider
Red Hat:enterprise_linux:9::appstream
 before 0:2.19.1-1.el9_6
0:2.19.1-1.el9_6
pki-jackson-jaxrs-providers
Red Hat:enterprise_linux:9::appstream
 before 0:2.19.1-1.el9_6
0:2.19.1-1.el9_6
pki-jackson-module-jaxb-annotations
Red Hat:enterprise_linux:9::appstream
 before 0:2.19.1-1.el9_6
0:2.19.1-1.el9_6
jackson-annotations
Red Hat:rhel_eus:9.4::appstream
 before 0:2.19.1-1.el9_4
0:2.19.1-1.el9_4
jackson-core
Red Hat:rhel_eus:9.4::appstream
 before 0:2.19.1-1.el9_4
0:2.19.1-1.el9_4
jackson-databind
Red Hat:rhel_eus:9.4::appstream
 before 0:2.19.1-1.el9_4
0:2.19.1-1.el9_4
jackson-jaxrs-providers
Red Hat:rhel_eus:9.4::appstream
 before 0:2.19.1-1.el9_4
0:2.19.1-1.el9_4
jackson-modules-base
Red Hat:rhel_eus:9.4::appstream
 before 0:2.19.1-1.el9_4
0:2.19.1-1.el9_4
pki-jackson-annotations
Red Hat:rhel_eus:9.4::appstream
 before 0:2.19.1-1.el9_4
0:2.19.1-1.el9_4
pki-jackson-core
Red Hat:rhel_eus:9.4::appstream
 before 0:2.19.1-1.el9_4
0:2.19.1-1.el9_4
pki-jackson-databind
Red Hat:rhel_eus:9.4::appstream
 before 0:2.19.1-1.el9_4
0:2.19.1-1.el9_4
pki-jackson-jaxrs-json-provider
Red Hat:rhel_eus:9.4::appstream
 before 0:2.19.1-1.el9_4
0:2.19.1-1.el9_4
pki-jackson-jaxrs-providers
Red Hat:rhel_eus:9.4::appstream
 before 0:2.19.1-1.el9_4
0:2.19.1-1.el9_4
pki-jackson-module-jaxb-annotations
Red Hat:rhel_eus:9.4::appstream
 before 0:2.19.1-1.el9_4
0:2.19.1-1.el9_4
jackson-annotations
Red Hat:rhel_e4s:9.2::appstream
 before 0:2.19.1-1.el9_2
0:2.19.1-1.el9_2
jackson-core
Red Hat:rhel_e4s:9.2::appstream
 before 0:2.19.1-1.el9_2
0:2.19.1-1.el9_2
jackson-databind
Red Hat:rhel_e4s:9.2::appstream
 before 0:2.19.1-1.el9_2
0:2.19.1-1.el9_2
jackson-jaxrs-providers
Red Hat:rhel_e4s:9.2::appstream
 before 0:2.19.1-1.el9_2
0:2.19.1-1.el9_2
jackson-modules-base
Red Hat:rhel_e4s:9.2::appstream
 before 0:2.19.1-1.el9_2
0:2.19.1-1.el9_2
pki-jackson-annotations
Red Hat:rhel_e4s:9.2::appstream
 before 0:2.19.1-1.el9_2
0:2.19.1-1.el9_2
pki-jackson-core
Red Hat:rhel_e4s:9.2::appstream
 before 0:2.19.1-1.el9_2
0:2.19.1-1.el9_2
pki-jackson-databind
Red Hat:rhel_e4s:9.2::appstream
 before 0:2.19.1-1.el9_2
0:2.19.1-1.el9_2
pki-jackson-jaxrs-json-provider
Red Hat:rhel_e4s:9.2::appstream
 before 0:2.19.1-1.el9_2
0:2.19.1-1.el9_2
pki-jackson-jaxrs-providers
Red Hat:rhel_e4s:9.2::appstream
 before 0:2.19.1-1.el9_2
0:2.19.1-1.el9_2
pki-jackson-module-jaxb-annotations
Red Hat:rhel_e4s:9.2::appstream
 before 0:2.19.1-1.el9_2
0:2.19.1-1.el9_2
jackson-annotations
Red Hat:rhel_e4s:9.0::appstream
 before 0:2.19.1-1.el9_0
0:2.19.1-1.el9_0
jackson-core
Red Hat:rhel_e4s:9.0::appstream
 before 0:2.19.1-1.el9_0
0:2.19.1-1.el9_0
jackson-databind
Red Hat:rhel_e4s:9.0::appstream
 before 0:2.19.1-1.el9_0
0:2.19.1-1.el9_0
jackson-jaxrs-providers
Red Hat:rhel_e4s:9.0::appstream
 before 0:2.19.1-1.el9_0
0:2.19.1-1.el9_0
jackson-modules-base
Red Hat:rhel_e4s:9.0::appstream
 before 0:2.19.1-1.el9_0
0:2.19.1-1.el9_0
pki-jackson-annotations
Red Hat:rhel_e4s:9.0::appstream
 before 0:2.19.1-1.el9_0
0:2.19.1-1.el9_0
pki-jackson-core
Red Hat:rhel_e4s:9.0::appstream
 before 0:2.19.1-1.el9_0
0:2.19.1-1.el9_0
pki-jackson-databind
Red Hat:rhel_e4s:9.0::appstream
 before 0:2.19.1-1.el9_0
0:2.19.1-1.el9_0
pki-jackson-jaxrs-json-provider
Red Hat:rhel_e4s:9.0::appstream
 before 0:2.19.1-1.el9_0
0:2.19.1-1.el9_0
pki-jackson-jaxrs-providers
Red Hat:rhel_e4s:9.0::appstream
 before 0:2.19.1-1.el9_0
0:2.19.1-1.el9_0
pki-jackson-module-jaxb-annotations
Red Hat:rhel_e4s:9.0::appstream
 before 0:2.19.1-1.el9_0
0:2.19.1-1.el9_0
apache-commons-collections
Red Hat:rhel_aus:8.4::appstream
 before 0:3.2.2-10.module+el8.1.0+3366+6dfb954c
0:3.2.2-10.module+el8.1.0+3366+6dfb954c
apache-commons-lang
Red Hat:rhel_aus:8.4::appstream
 before 0:2.6-21.module+el8.1.0+3366+6dfb954c
0:2.6-21.module+el8.1.0+3366+6dfb954c
apache-commons-net
Red Hat:rhel_aus:8.4::appstream
 before 0:3.6-3.module+el8.3.0+6805+72837426
0:3.6-3.module+el8.3.0+6805+72837426
bea-stax
Red Hat:rhel_aus:8.4::appstream
 before 0:1.2.0-16.module+el8.1.0+3366+6dfb954c
0:1.2.0-16.module+el8.1.0+3366+6dfb954c
bea-stax-api
Red Hat:rhel_aus:8.4::appstream
 before 0:1.2.0-16.module+el8.1.0+3366+6dfb954c
0:1.2.0-16.module+el8.1.0+3366+6dfb954c
fasterxml-oss-parent
Red Hat:rhel_aus:8.4::appstream
 before 0:69-3.module+el8.4.0+23391+b488e6bf
0:69-3.module+el8.4.0+23391+b488e6bf
glassfish-fastinfoset
Red Hat:rhel_aus:8.4::appstream
 before 0:1.2.13-9.module+el8.1.0+3366+6dfb954c
0:1.2.13-9.module+el8.1.0+3366+6dfb954c
glassfish-jaxb
Red Hat:rhel_aus:8.4::appstream
 before 0:2.2.11-11.module+el8.1.0+3366+6dfb954c
0:2.2.11-11.module+el8.1.0+3366+6dfb954c
glassfish-jaxb-api
Red Hat:rhel_aus:8.4::appstream
 before 0:2.2.12-8.module+el8.1.0+3366+6dfb954c
0:2.2.12-8.module+el8.1.0+3366+6dfb954c
glassfish-jaxb-core
Red Hat:rhel_aus:8.4::appstream
 before 0:2.2.11-11.module+el8.1.0+3366+6dfb954c
0:2.2.11-11.module+el8.1.0+3366+6dfb954c
glassfish-jaxb-runtime
Red Hat:rhel_aus:8.4::appstream
 before 0:2.2.11-11.module+el8.1.0+3366+6dfb954c
0:2.2.11-11.module+el8.1.0+3366+6dfb954c
glassfish-jaxb-txw2
Red Hat:rhel_aus:8.4::appstream
 before 0:2.2.11-11.module+el8.1.0+3366+6dfb954c
0:2.2.11-11.module+el8.1.0+3366+6dfb954c
jackson-annotations
Red Hat:rhel_aus:8.4::appstream
 before 0:2.19.1-2.module+el8.4.0+23391+b488e6bf
0:2.19.1-2.module+el8.4.0+23391+b488e6bf
jackson-bom
Red Hat:rhel_aus:8.4::appstream
 before 0:2.19.1-1.module+el8.4.0+23391+b488e6bf
0:2.19.1-1.module+el8.4.0+23391+b488e6bf
jackson-core
Red Hat:rhel_aus:8.4::appstream
 before 0:2.19.1-2.module+el8.4.0+23391+b488e6bf
0:2.19.1-2.module+el8.4.0+23391+b488e6bf
jackson-databind
Red Hat:rhel_aus:8.4::appstream
 before 0:2.19.1-1.module+el8.4.0+23391+b488e6bf
0:2.19.1-1.module+el8.4.0+23391+b488e6bf
jackson-jaxrs-json-provider
Red Hat:rhel_aus:8.4::appstream
 before 0:2.19.1-1.module+el8.4.0+23391+b488e6bf
0:2.19.1-1.module+el8.4.0+23391+b488e6bf
jackson-jaxrs-providers
Red Hat:rhel_aus:8.4::appstream
 before 0:2.19.1-1.module+el8.4.0+23391+b488e6bf
0:2.19.1-1.module+el8.4.0+23391+b488e6bf
jackson-module-jaxb-annotations
Red Hat:rhel_aus:8.4::appstream
 before 0:2.19.1-1.module+el8.4.0+23391+b488e6bf
0:2.19.1-1.module+el8.4.0+23391+b488e6bf
jackson-modules-base
Red Hat:rhel_aus:8.4::appstream
 before 0:2.19.1-1.module+el8.4.0+23391+b488e6bf
0:2.19.1-1.module+el8.4.0+23391+b488e6bf
jackson-parent
Red Hat:rhel_aus:8.4::appstream
 before 0:2.19.2-1.module+el8.4.0+23391+b488e6bf
0:2.19.2-1.module+el8.4.0+23391+b488e6bf
jakarta-commons-httpclient
Red Hat:rhel_aus:8.4::appstream
 before 1:3.1-28.module+el8.1.0+3366+6dfb954c
1:3.1-28.module+el8.1.0+3366+6dfb954c
javassist
Red Hat:rhel_aus:8.4::appstream
 before 0:3.18.1-8.module+el8.1.0+3366+6dfb954c
0:3.18.1-8.module+el8.1.0+3366+6dfb954c
javassist-javadoc
Red Hat:rhel_aus:8.4::appstream
 before 0:3.18.1-8.module+el8.1.0+3366+6dfb954c
0:3.18.1-8.module+el8.1.0+3366+6dfb954c
pki-servlet-4.0-api
Red Hat:rhel_aus:8.4::appstream
 before 1:9.0.30-1.module+el8.4.0+23391+b488e6bf.2
1:9.0.30-1.module+el8.4.0+23391+b488e6bf.2
pki-servlet-engine
Red Hat:rhel_aus:8.4::appstream
 before 1:9.0.30-1.module+el8.4.0+23391+b488e6bf.2
1:9.0.30-1.module+el8.4.0+23391+b488e6bf.2
python-nss
Red Hat:rhel_aus:8.4::appstream
 before 0:1.0.1-10.module+el8.1.0+3366+6dfb954c
0:1.0.1-10.module+el8.1.0+3366+6dfb954c
python-nss-debugsource
Red Hat:rhel_aus:8.4::appstream
 before 0:1.0.1-10.module+el8.1.0+3366+6dfb954c
0:1.0.1-10.module+el8.1.0+3366+6dfb954c
python-nss-doc
Red Hat:rhel_aus:8.4::appstream
 before 0:1.0.1-10.module+el8.1.0+3366+6dfb954c
0:1.0.1-10.module+el8.1.0+3366+6dfb954c
python3-nss
Red Hat:rhel_aus:8.4::appstream
 before 0:1.0.1-10.module+el8.1.0+3366+6dfb954c
0:1.0.1-10.module+el8.1.0+3366+6dfb954c
python3-nss-debuginfo
Red Hat:rhel_aus:8.4::appstream
 before 0:1.0.1-10.module+el8.1.0+3366+6dfb954c
0:1.0.1-10.module+el8.1.0+3366+6dfb954c
relaxngDatatype
Red Hat:rhel_aus:8.4::appstream
 before 0:2011.1-7.module+el8.1.0+3366+6dfb954c
0:2011.1-7.module+el8.1.0+3366+6dfb954c
resteasy
Red Hat:rhel_aus:8.4::appstream
 before 0:3.0.26-6.module+el8.4.0+23399+fc91639f
0:3.0.26-6.module+el8.4.0+23399+fc91639f
slf4j
Red Hat:rhel_aus:8.4::appstream
 before 0:1.7.25-4.module+el8.1.0+3366+6dfb954c
0:1.7.25-4.module+el8.1.0+3366+6dfb954c
slf4j-jdk14
Red Hat:rhel_aus:8.4::appstream
 before 0:1.7.25-4.module+el8.1.0+3366+6dfb954c
0:1.7.25-4.module+el8.1.0+3366+6dfb954c
stax-ex
Red Hat:rhel_aus:8.4::appstream
 before 0:1.7.7-8.module+el8.2.0+5723+4574fbff
0:1.7.7-8.module+el8.2.0+5723+4574fbff
jackson-annotations
Rocky Linux:9
 before 0:2.19.1-1.el9_6
0:2.19.1-1.el9_6
jackson-core
Rocky Linux:9
 before 0:2.19.1-1.el9_6
0:2.19.1-1.el9_6
jackson-databind
Rocky Linux:9
 before 0:2.19.1-1.el9_6
0:2.19.1-1.el9_6
jackson-jaxrs-providers
Rocky Linux:9
 before 0:2.19.1-1.el9_6
0:2.19.1-1.el9_6
jackson-modules-base
Rocky Linux:9
 before 0:2.19.1-1.el9_6
0:2.19.1-1.el9_6
apache-commons-collections
Rocky Linux:8
 before 0:3.2.2-10.module+el8.10.0+1763+c7c02164
0:3.2.2-10.module+el8.10.0+1763+c7c02164
apache-commons-collections
Rocky Linux:8
 before 0:3.2.2-10.module+el8.10.0+2052+1b0fb438
0:3.2.2-10.module+el8.10.0+2052+1b0fb438
apache-commons-collections
Rocky Linux:8
 before 0:3.2.2-10.module+el8.3.0+74+855e3f5d
0:3.2.2-10.module+el8.3.0+74+855e3f5d
apache-commons-lang
Rocky Linux:8
 before 0:2.6-21.module+el8.10.0+1763+c7c02164
0:2.6-21.module+el8.10.0+1763+c7c02164
apache-commons-lang
Rocky Linux:8
 before 0:2.6-21.module+el8.3.0+74+855e3f5d
0:2.6-21.module+el8.3.0+74+855e3f5d
apache-commons-net
Rocky Linux:8
 before 0:3.6-3.module+el8.10.0+1763+c7c02164
0:3.6-3.module+el8.10.0+1763+c7c02164
apache-commons-net
Rocky Linux:8
 before 0:3.6-3.module+el8.10.0+2052+1b0fb438
0:3.6-3.module+el8.10.0+2052+1b0fb438
apache-commons-net
Rocky Linux:8
 before 0:3.6-3.module+el8.3.0+74+855e3f5d
0:3.6-3.module+el8.3.0+74+855e3f5d
bea-stax
Rocky Linux:8
 before 0:1.2.0-16.module+el8.10.0+1763+c7c02164
0:1.2.0-16.module+el8.10.0+1763+c7c02164
bea-stax
Rocky Linux:8
 before 0:1.2.0-16.module+el8.10.0+2052+1b0fb438
0:1.2.0-16.module+el8.10.0+2052+1b0fb438
glassfish-fastinfoset
Rocky Linux:8
 before 0:1.2.13-9.module+el8.10.0+1763+c7c02164
0:1.2.13-9.module+el8.10.0+1763+c7c02164
glassfish-fastinfoset
Rocky Linux:8
 before 0:1.2.13-9.module+el8.10.0+2052+1b0fb438
0:1.2.13-9.module+el8.10.0+2052+1b0fb438
glassfish-jaxb
Rocky Linux:8
 before 0:2.2.11-12.module+el8.10.0+2052+1b0fb438
0:2.2.11-12.module+el8.10.0+2052+1b0fb438
glassfish-jaxb
Rocky Linux:8
 before 0:2.2.11-12.module+el8.10.0+1763+c7c02164
0:2.2.11-12.module+el8.10.0+1763+c7c02164
glassfish-jaxb-api
Rocky Linux:8
 before 0:2.2.12-8.module+el8.10.0+1763+c7c02164
0:2.2.12-8.module+el8.10.0+1763+c7c02164
glassfish-jaxb-api
Rocky Linux:8
 before 0:2.2.12-8.module+el8.10.0+2052+1b0fb438
0:2.2.12-8.module+el8.10.0+2052+1b0fb438
jackson-annotations
Rocky Linux:8
 before 0:2.19.1-1.module+el8.10.0+2052+1b0fb438
0:2.19.1-1.module+el8.10.0+2052+1b0fb438
jackson-core
Rocky Linux:8
 before 0:2.19.1-1.module+el8.10.0+2052+1b0fb438
0:2.19.1-1.module+el8.10.0+2052+1b0fb438
jackson-databind
Rocky Linux:8
 before 0:2.19.1-1.module+el8.10.0+2052+1b0fb438
0:2.19.1-1.module+el8.10.0+2052+1b0fb438
jakarta-commons-httpclient
Rocky Linux:8
 before 1:3.1-28.module+el8.10.0+2052+1b0fb438
1:3.1-28.module+el8.10.0+2052+1b0fb438
jakarta-commons-httpclient
Rocky Linux:8
 before 1:3.1-28.module+el8.10.0+1763+c7c02164
1:3.1-28.module+el8.10.0+1763+c7c02164
jakarta-commons-httpclient
Rocky Linux:8
 before 1:3.1-28.module+el8.3.0+74+855e3f5d
1:3.1-28.module+el8.3.0+74+855e3f5d
javassist
Rocky Linux:8
 before 0:3.18.1-8.module+el8.10.0+1763+c7c02164
0:3.18.1-8.module+el8.10.0+1763+c7c02164
javassist
Rocky Linux:8
 before 0:3.18.1-8.module+el8.10.0+2052+1b0fb438
0:3.18.1-8.module+el8.10.0+2052+1b0fb438
javassist
Rocky Linux:8
 before 0:3.18.1-8.module+el8.3.0+74+855e3f5d
0:3.18.1-8.module+el8.3.0+74+855e3f5d
pki-servlet-engine
Rocky Linux:8
 before 1:9.0.62-1.module+el8.10.0+1767+f923f786
1:9.0.62-1.module+el8.10.0+1767+f923f786
pki-servlet-engine
Rocky Linux:8
 before 1:9.0.62-1.module+el8.10.0+2052+1b0fb438
1:9.0.62-1.module+el8.10.0+2052+1b0fb438
relaxngDatatype
Rocky Linux:8
 before 0:2011.1-7.module+el8.10.0+1763+c7c02164
0:2011.1-7.module+el8.10.0+1763+c7c02164
relaxngDatatype
Rocky Linux:8
 before 0:2011.1-7.module+el8.10.0+2052+1b0fb438
0:2011.1-7.module+el8.10.0+2052+1b0fb438
slf4j
Rocky Linux:8
 before 0:1.7.25-4.module+el8.10.0+2052+1b0fb438
0:1.7.25-4.module+el8.10.0+2052+1b0fb438
slf4j
Rocky Linux:8
 before 0:1.7.25-4.module+el8.6.0+843+5a13dac3
0:1.7.25-4.module+el8.6.0+843+5a13dac3
slf4j
Rocky Linux:8
 before 0:1.7.25-4.module+el8.10.0+1763+c7c02164
0:1.7.25-4.module+el8.10.0+1763+c7c02164
slf4j
Rocky Linux:8
 before 0:1.7.25-4.module+el8.10.0+2003+8aeac9cb
0:1.7.25-4.module+el8.10.0+2003+8aeac9cb
slf4j
Rocky Linux:8
 before 0:1.7.25-4.module+el8.3.0+74+855e3f5d
0:1.7.25-4.module+el8.3.0+74+855e3f5d
stax-ex
Rocky Linux:8
 before 0:1.7.7-8.module+el8.10.0+2052+1b0fb438
0:1.7.7-8.module+el8.10.0+2052+1b0fb438
stax-ex
Rocky Linux:8
 before 0:1.7.7-8.module+el8.10.0+1763+c7c02164
0:1.7.7-8.module+el8.10.0+1763+c7c02164
velocity
Rocky Linux:8
 before 0:1.7-24.module+el8.10.0+2052+1b0fb438
0:1.7-24.module+el8.10.0+2052+1b0fb438
velocity
Rocky Linux:8
 before 0:1.7-24.module+el8.10.0+1763+c7c02164
0:1.7-24.module+el8.10.0+1763+c7c02164
velocity
Rocky Linux:8
 before 0:1.7-24.module+el8.3.0+74+855e3f5d
0:1.7-24.module+el8.3.0+74+855e3f5d
xalan-j2
Rocky Linux:8
 before 0:2.7.1-38.module+el8.10.0+1763+c7c02164
0:2.7.1-38.module+el8.10.0+1763+c7c02164
xalan-j2
Rocky Linux:8
 before 0:2.7.1-38.module+el8.10.0+2052+1b0fb438
0:2.7.1-38.module+el8.10.0+2052+1b0fb438
xalan-j2
Rocky Linux:8
 before 0:2.7.1-38.module+el8.3.0+74+855e3f5d
0:2.7.1-38.module+el8.3.0+74+855e3f5d
xerces-j2
Rocky Linux:8
 before 0:2.11.0-34.module+el8.10.0+2052+1b0fb438
0:2.11.0-34.module+el8.10.0+2052+1b0fb438
xerces-j2
Rocky Linux:8
 before 0:2.11.0-34.module+el8.10.0+1763+c7c02164
0:2.11.0-34.module+el8.10.0+1763+c7c02164
xerces-j2
Rocky Linux:8
 before 0:2.11.0-34.module+el8.3.0+74+855e3f5d
0:2.11.0-34.module+el8.3.0+74+855e3f5d
xml-commons-apis
Rocky Linux:8
 before 0:1.4.01-25.module+el8.10.0+1763+c7c02164
0:1.4.01-25.module+el8.10.0+1763+c7c02164
xml-commons-apis
Rocky Linux:8
 before 0:1.4.01-25.module+el8.10.0+2052+1b0fb438
0:1.4.01-25.module+el8.10.0+2052+1b0fb438
xml-commons-apis
Rocky Linux:8
 before 0:1.4.01-25.module+el8.3.0+74+855e3f5d
0:1.4.01-25.module+el8.3.0+74+855e3f5d
xml-commons-apis
Rocky Linux:8
 before 0:1.4.01-25.module+el8.10.0+2003+8aeac9cb
0:1.4.01-25.module+el8.10.0+2003+8aeac9cb
xml-commons-resolver
Rocky Linux:8
 before 0:1.2-26.module+el8.10.0+1763+c7c02164
0:1.2-26.module+el8.10.0+1763+c7c02164
xml-commons-resolver
Rocky Linux:8
 before 0:1.2-26.module+el8.10.0+2052+1b0fb438
0:1.2-26.module+el8.10.0+2052+1b0fb438
xml-commons-resolver
Rocky Linux:8
 before 0:1.2-26.module+el8.3.0+74+855e3f5d
0:1.2-26.module+el8.3.0+74+855e3f5d
xmlstreambuffer
Rocky Linux:8
 before 0:1.5.4-8.module+el8.10.0+2052+1b0fb438
0:1.5.4-8.module+el8.10.0+2052+1b0fb438
xmlstreambuffer
Rocky Linux:8
 before 0:1.5.4-8.module+el8.10.0+1763+c7c02164
0:1.5.4-8.module+el8.10.0+1763+c7c02164
xsom
Rocky Linux:8
 before 0:0-19.20110809svn.module+el8.10.0+1763+c7c02164
0:0-19.20110809svn.module+el8.10.0+1763+c7c02164
xsom
Rocky Linux:8
 before 0:0-19.20110809svn.module+el8.10.0+2052+1b0fb438
0:0-19.20110809svn.module+el8.10.0+2052+1b0fb438
com.fasterxml.jackson.core:jackson-core
Root:Maven
 before 2.12.7-aikido.3
2.12.7-aikido.32.12.7-aikido.22.13.2-aikido.22.13.3-aikido.22.9.2-aikido.22.14.1-aikido.22.14.2-aikido.12.14.3-aikido.12.13.4-aikido.12.12.5-aikido.12.12.4-aikido.12.12.3-aikido.12.14.3-aikido.22.10.1-aikido.12.13.2-aikido.32.12.7-aikido.42.12.4-aikido.22.12.5-aikido.22.10.1-aikido.22.12.3-aikido.22.13.4-aikido.22.14.2-aikido.22.14.2-aikido.32.14.3-aikido.32.12.3-aikido.32.12.4-aikido.32.13.2-aikido.42.12.5-aikido.32.13.4-aikido.32.14.1-aikido.32.10.1-aikido.32.13.0-aikido.12.3.1-aikido.12.14.2-aikido.42.13.0-aikido.22.12.7-aikido.52.12.7-aikido.62.12.7-aikido.72.13.5-aikido.12.13.5-aikido.22.15.0-aikido.1
io.root.com.fasterxml.jackson.core:jackson-core
Root:Maven
 before 2.12.7-root.io.1
2.12.7-root.io.12.12.7-root.io.32.13.2-root.io.12.13.3-root.io.12.9.2-root.io.12.12.7-root.io.22.13.2-root.io.22.13.3-root.io.22.9.2-root.io.22.14.1-root.io.22.14.2-root.io.12.14.3-root.io.12.13.4-root.io.12.12.5-root.io.12.12.4-root.io.12.12.3-root.io.12.14.3-root.io.22.10.1-root.io.12.13.2-root.io.32.12.7-root.io.42.12.4-root.io.22.12.5-root.io.22.14.2-root.io.22.10.1-root.io.22.12.3-root.io.22.13.4-root.io.22.14.2-root.io.32.14.3-root.io.32.12.3-root.io.32.12.4-root.io.32.13.2-root.io.42.12.5-root.io.32.13.4-root.io.32.14.1-root.io.32.10.1-root.io.32.13.0-root.io.12.3.1-root.io.12.14.2-root.io.42.13.0-root.io.22.12.7-root.io.52.12.7-root.io.62.12.7-root.io.72.13.5-root.io.12.13.5-root.io.22.15.0-root.io.1
jackson-core
Ubuntu:16.04:LTS
 All versions, plus listed versions
2.4.2-2
 None known
jackson-core
Ubuntu:18.04:LTS
 All versions, plus listed versions
2.8.6-12.9.1-12.9.4-12.9.8-3~18.04
 None known
jackson-core
Ubuntu:20.04:LTS
 All versions, plus listed versions
2.9.8-32.10.0-12.10.1-1
 None known
jackson-core
Ubuntu:22.04:LTS
 All versions, plus listed versions
2.12.1-12.13.0-12.13.0-2
 None known
jackson-core
Ubuntu:24.04:LTS
 All versions, plus listed versions
2.14.1-1
 None known
jackson-core
Ubuntu:25.10
 All versions, plus listed versions
2.14.1-1
 None known
jackson-core
Ubuntu:26.10
 All versions, plus listed versions
2.14.1-1build12.14.1-2
 None known
jackson-core
Ubuntu:26.04:LTS
 All versions, plus listed versions
2.14.1-12.14.1-1build1
 None known

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
SourceLinkDate
PoC in GitHubsassoftware/jackson2026-02-23

History

History
RecordedChangedSources
affected
facts
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV, PoC in GitHub

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2025-52999 is a high vulnerability (CVSS 8.7) in Fasterxml Jackson-core, published June 25, 2025. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 0.77%, the 55th percentile. Fixed in com.fasterxml.jackson.core:jackson-core 2.15.0.

References

Show 141 moreShow less
This page doesn't list everything

Left out here: 533 package rows and 93 versions. The JSON record has them. Left out on purpose, here and in the API, to keep responses small: 15 source records.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open