{"id":"OSV-2024-245","aliases":[],"status":"published","title":"Security exception in com.github.javaparser.ast.validator.TreeVisitorValidator.accept","description":"OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=67672\n\n```\nCrash type: Security exception\nCrash state:\ncom.github.javaparser.ast.validator.TreeVisitorValidator.accept\ncom.github.javaparser.ast.expr.FieldAccessExpr.getMetaModel\ncom.github.javaparser.ast.expr.FieldAccessExpr.getMetaModel\n```","facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"published":"2024-04-08T00:11:03.595756Z","modified":"2026-11-08T14:30:03Z","affected":[{"source":"osv","ecosystem":"OSS-Fuzz","package":"jackson-databind","ranges":[{"type":"GIT","events":[{"introduced":"407f500a1ec7e7bc31282d8763cf1a47ef4f0338"}]}],"versions":["jackson-databind-2.17.1","jackson-databind-2.17.2","jackson-databind-2.18.0-rc1","jackson-databind-2.18.0","jackson-databind-2.18.1","jackson-databind-2.17.3","jackson-databind-2.18.2","jackson-databind-2.18.3","jackson-databind-3.0.0-rc1","jackson-databind-3.0.0-rc2","jackson-databind-2.19.0-rc2","jackson-databind-3.0.0-rc3","jackson-databind-2.19.0","jackson-databind-2.18.4","jackson-databind-3.0.0-rc4","jackson-databind-3.0.0-rc5","jackson-databind-2.19.1","jackson-databind-2.19.2","jackson-databind-3.0.0-rc6","jackson-databind-2.12.7.2","jackson-databind-2.20.0","jackson-databind-2.20.0-rc1","jackson-databind-3.0.0-rc10","jackson-databind-3.0.0-rc7","jackson-databind-3.0.0-rc8","jackson-databind-3.0.0-rc9","jackson-databind-3.0.0","jackson-databind-3.0.1","jackson-databind-2.18.5","jackson-databind-2.19.3","jackson-databind-2.19.4","jackson-databind-2.20.1","jackson-databind-3.0.2","jackson-databind-3.0.3","jackson-databind-2.21.0","jackson-databind-2.20.2","jackson-databind-3.0.4","jackson-databind-3.1.0-rc1","jackson-databind-2.18.6","jackson-databind-2.21.1","jackson-databind-3.1.0","jackson-databind-2.21.2","jackson-databind-3.1.1","jackson-databind-3.1.2","jackson-databind-2.18.7","jackson-databind-2.21.3","jackson-databind-3.1.3","jackson-databind-2.18.8","jackson-databind-2.21.4","jackson-databind-3.1.4","jackson-databind-2.22.0","jackson-databind-3.2.0","jackson-databind-2.21.5","jackson-databind-2.18.9","jackson-databind-2.22.1","jackson-databind-3.1.5","jackson-databind-3.2.1","jackson-databind-2.21.6","jackson-databind-3.1.6","jackson-databind-3.2.2","jackson-databind-2.18.10","jackson-databind-2.22.2","jackson-databind-2.18.11","jackson-databind-2.21.7","jackson-databind-2.22.3","jackson-databind-3.1.7","jackson-databind-3.2.3","jackson-databind-2.18.12","jackson-databind-2.21.8","jackson-databind-2.22.4","jackson-databind-3.1.8","jackson-databind-3.2.4","jackson-databind-2.23.0","jackson-databind-3.3.0"]}],"references":[{"url":"https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=67672","tags":["report"]}],"sources":{"osv":[{"id":"OSV-2024-245","title":"Security exception in com.github.javaparser.ast.validator.TreeVisitorValidator.accept","description":"OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=67672\n\n```\nCrash type: Security exception\nCrash state:\ncom.github.javaparser.ast.validator.TreeVisitorValidator.accept\ncom.github.javaparser.ast.expr.FieldAccessExpr.getMetaModel\ncom.github.javaparser.ast.expr.FieldAccessExpr.getMetaModel\n```\n","status":"published","published":"2024-04-08T00:11:03.595756Z","modified":"2026-11-08T14:30:03.135712119Z","updated_at":"2026-11-08T14:36:10.941264Z"}]}}