pki-jackson-annotations vulnerabilities (AlmaLinux)

3 vulnerabilities.

• pki-jackson-annotations AlmaLinux jackson-databind: PolymorphicTypeValidator bypass via generic type parameters allows arbitrary class instantiation CVE-2026-54512 Public exploitFix available 8.1 HighJune 23, 2026
• pki-jackson-annotations AlmaLinux jackson-databind: Array subtype allowlist bypass in BasicPolymorphicTypeValidator (allowIfSubTypeIsArray) CVE-2026-54513 Fix available 8.1 HighJune 23, 2026
• pki-jackson-annotations AlmaLinux jackson-core Has Potential for StackoverflowError if user parses an input file that contains very deeply nested data CVE-2025-52999 Public exploitFix available 8.7 HighJune 25, 2025