Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:deb/debian/jackson-dataformat-xml@2.8.5-1?distro=trixie
purl pkg:deb/debian/jackson-dataformat-xml@2.8.5-1?distro=trixie
Vulnerabilities affecting this package (0)
Vulnerability Summary Fixed by
This package is not known to be affected by vulnerabilities.
Vulnerabilities fixed by this package (1)
Vulnerability Summary Aliases
VCID-ekx6-m3n8-1bcw XmlMapper in the Jackson XML dataformat component (aka jackson-dataformat-xml) before 2.7.8 and 2.8.x before 2.8.4 allows remote attackers to conduct server-side request forgery (SSRF) attacks via vectors related to a DTD. CVE-2016-7051
GHSA-7c2r-3jqf-c9rw

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-16T13:30:20.781393+00:00 Debian Importer Fixing VCID-ekx6-m3n8-1bcw https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-13T09:19:15.870215+00:00 Debian Importer Fixing VCID-ekx6-m3n8-1bcw https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-03T07:27:48.060817+00:00 Debian Importer Fixing VCID-ekx6-m3n8-1bcw https://security-tracker.debian.org/tracker/data/json 38.1.0