Search for packages
| purl | pkg:deb/debian/jackson-databind@2.9.8-3?distro=trixie |
| Vulnerability | Summary | Fixed by |
|---|---|---|
| This package is not known to be affected by vulnerabilities. | ||
| Vulnerability | Summary | Aliases |
|---|---|---|
| VCID-56sb-829v-6qbz | Information Disclosure A Polymorphic Typing issue was discovered in FasterXML jackson-databind. When Default Typing is enabled (either globally or for a specific property) for an externally exposed JSON endpoint and the service has JDOM in the classpath, an attacker can send a specifically crafted JSON message that allows them to read arbitrary local files on the server. |
CVE-2019-12814
GHSA-cmfg-87vq-g5g4 |
| VCID-ygs8-4gxq-kygq | Deserialization of Untrusted Data in FasterXML jackson-databind FasterXML jackson-databind 2.x before 2.9.9.1 might allow attackers to have a variety of impacts by leveraging failure to block the logback-core class from polymorphic deserialization. Depending on the classpath content, remote code execution may be possible. |
CVE-2019-12384
GHSA-mph4-vhrx-mv67 |
| Date | Actor | Action | Vulnerability | Source | VulnerableCode Version |
|---|---|---|---|---|---|
| 2026-04-16T12:31:18.030712+00:00 | Debian Importer | Fixing | VCID-56sb-829v-6qbz | https://security-tracker.debian.org/tracker/data/json | 38.4.0 |
| 2026-04-16T10:07:57.240031+00:00 | Debian Importer | Fixing | VCID-ygs8-4gxq-kygq | https://security-tracker.debian.org/tracker/data/json | 38.4.0 |
| 2026-04-13T08:34:26.341492+00:00 | Debian Importer | Fixing | VCID-56sb-829v-6qbz | https://security-tracker.debian.org/tracker/data/json | 38.3.0 |
| 2026-04-13T06:48:18.706761+00:00 | Debian Importer | Fixing | VCID-ygs8-4gxq-kygq | https://security-tracker.debian.org/tracker/data/json | 38.3.0 |
| 2026-04-03T07:27:46.162115+00:00 | Debian Importer | Fixing | VCID-56sb-829v-6qbz | https://security-tracker.debian.org/tracker/data/json | 38.1.0 |
| 2026-04-03T07:27:46.122507+00:00 | Debian Importer | Fixing | VCID-ygs8-4gxq-kygq | https://security-tracker.debian.org/tracker/data/json | 38.1.0 |