Search for packages
| purl | pkg:deb/debian/libjackson-json-java@1.9.13-2?distro=trixie |
| Vulnerability | Summary | Fixed by |
|---|---|---|
| This package is not known to be affected by vulnerabilities. | ||
| Vulnerability | Summary | Aliases |
|---|---|---|
| VCID-7x9r-v8nm-nbf7 | Improper Restriction of XML External Entity Reference in jackson-mapper-asl A flaw was found in org.codehaus.jackson:jackson-mapper-asl:1.9.x libraries. XML external entity vulnerabilities similar to CVE-2016-3720 also affects codehaus jackson-mapper-asl libraries but in different classes. |
CVE-2019-10172
GHSA-r6j9-8759-g62w |
| VCID-ceub-d4s9-dkcd | Deserialization of Untrusted Data A deserialization flaw was discovered in the jackson-databind which could allow an unauthenticated user to perform code execution by sending the maliciously crafted input to the `readValue` method of the `ObjectMapper`. |
CVE-2017-15095
GHSA-h592-38cm-4ggp |
| VCID-v84e-sf92-dqa1 | A deserialization flaw was discovered in the jackson-databind, versions before 2.6.7.1, 2.7.9.1 and 2.8.9, which could allow an unauthenticated user to perform code execution by sending the maliciously crafted input to the readValue method of the ObjectMapper. |
CVE-2017-7525
GHSA-qxxx-2pp7-5hmx |