Django REST framework

Vulnerability Instance

Lookup for vulnerabilities affecting packages.

Vulnerability_idVCID-fjz8-msfe-27hv
Summary
Unsafe Deserialization in jackson-databind
FasterXML jackson-databind 2.x before 2.9.10.8 and 2.6.7.5 mishandles the interaction between serialization gadgets and typing, related to `oadd.org.apache.commons.dbcp.cpdsadapter.DriverAdapterCPDS`.
Aliases
0
alias CVE-2020-36179
1
alias GHSA-9gph-22xh-8x98
Fixed_packages
0
url pkg:deb/debian/jackson-databind@2.12.1-1?distro=trixie
purl pkg:deb/debian/jackson-databind@2.12.1-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/jackson-databind@2.12.1-1%3Fdistro=trixie
1
url pkg:deb/debian/jackson-databind@2.12.1-1%2Bdeb11u1
purl pkg:deb/debian/jackson-databind@2.12.1-1%2Bdeb11u1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2841-dnfz-2qgm
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/jackson-databind@2.12.1-1%252Bdeb11u1
2
url pkg:deb/debian/jackson-databind@2.12.1-1%2Bdeb11u1?distro=trixie
purl pkg:deb/debian/jackson-databind@2.12.1-1%2Bdeb11u1?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2841-dnfz-2qgm
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/jackson-databind@2.12.1-1%252Bdeb11u1%3Fdistro=trixie
3
url pkg:deb/debian/jackson-databind@2.14.0-1?distro=trixie
purl pkg:deb/debian/jackson-databind@2.14.0-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/jackson-databind@2.14.0-1%3Fdistro=trixie
4
url pkg:deb/debian/jackson-databind@2.14.0%2Bds-1?distro=trixie
purl pkg:deb/debian/jackson-databind@2.14.0%2Bds-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/jackson-databind@2.14.0%252Bds-1%3Fdistro=trixie
5
url pkg:deb/debian/jackson-databind@2.14.0%2Bds-2?distro=trixie
purl pkg:deb/debian/jackson-databind@2.14.0%2Bds-2?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/jackson-databind@2.14.0%252Bds-2%3Fdistro=trixie
6
url pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.7.5
purl pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.7.5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1uan-q6u8-affj
1
vulnerability VCID-5887-pcyq-nkht
2
vulnerability VCID-88hx-kauy-4fcy
3
vulnerability VCID-8ec9-5qt4-duat
4
vulnerability VCID-8fr2-v728-cfcc
5
vulnerability VCID-8htk-33f4-4ufg
6
vulnerability VCID-8kwc-sxvr-skgp
7
vulnerability VCID-auzw-j1fc-jff8
8
vulnerability VCID-cnns-pjex-4ybt
9
vulnerability VCID-ez2q-xgz1-rkab
10
vulnerability VCID-fkct-tzwg-mkh8
11
vulnerability VCID-kdkp-1ucy-w3g1
12
vulnerability VCID-m3y5-xa6w-83b6
13
vulnerability VCID-nz1v-4hgs-6yge
14
vulnerability VCID-qx3m-tcqj-ukc2
15
vulnerability VCID-r94a-3fq2-efdg
16
vulnerability VCID-skd6-gqh8-sbba
17
vulnerability VCID-tfky-edec-13gw
18
vulnerability VCID-uzry-ts4t-fbc8
19
vulnerability VCID-vnh3-bvyq-13d6
20
vulnerability VCID-vqke-p81x-sffn
21
vulnerability VCID-w1c4-c4xs-yba4
22
vulnerability VCID-w7nq-y9sx-nfcc
23
vulnerability VCID-xqz3-k7ts-juck
24
vulnerability VCID-zm3q-aquc-pqg7
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.7.5
7
url pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.10.8
purl pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.10.8
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-8fr2-v728-cfcc
1
vulnerability VCID-r94a-3fq2-efdg
2
vulnerability VCID-w1c4-c4xs-yba4
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.10.8
Affected_packages
0
url pkg:deb/debian/jackson-databind@2.4.2-2
purl pkg:deb/debian/jackson-databind@2.4.2-2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-18u1-9nc1-2feh
1
vulnerability VCID-1uan-q6u8-affj
2
vulnerability VCID-1z31-s1cu-bbh4
3
vulnerability VCID-2uzw-pn14-p7a1
4
vulnerability VCID-314g-t8xy-5khg
5
vulnerability VCID-39mg-y1k8-xbf9
6
vulnerability VCID-4mtm-6bjh-7ka1
7
vulnerability VCID-4r6g-jwvd-1ke5
8
vulnerability VCID-4x8s-rj62-tqca
9
vulnerability VCID-5887-pcyq-nkht
10
vulnerability VCID-58n5-hqdf-xff2
11
vulnerability VCID-62jb-3d7y-y7ae
12
vulnerability VCID-7pd3-dre3-wug9
13
vulnerability VCID-7svn-u8ub-4faw
14
vulnerability VCID-7t7w-fq26-auc7
15
vulnerability VCID-88hx-kauy-4fcy
16
vulnerability VCID-89dx-2s8k-mufw
17
vulnerability VCID-8ec9-5qt4-duat
18
vulnerability VCID-8fr2-v728-cfcc
19
vulnerability VCID-8htk-33f4-4ufg
20
vulnerability VCID-8kwc-sxvr-skgp
21
vulnerability VCID-8mns-fyju-dqdr
22
vulnerability VCID-a7vm-mty5-9bhg
23
vulnerability VCID-auzw-j1fc-jff8
24
vulnerability VCID-c1uz-emh5-9fhe
25
vulnerability VCID-cnns-pjex-4ybt
26
vulnerability VCID-crra-28kn-mqab
27
vulnerability VCID-d6ez-jva8-hyag
28
vulnerability VCID-dd77-bpcr-zfam
29
vulnerability VCID-ez2q-xgz1-rkab
30
vulnerability VCID-fjz8-msfe-27hv
31
vulnerability VCID-fkct-tzwg-mkh8
32
vulnerability VCID-fqzk-v2gt-s7am
33
vulnerability VCID-gxpn-pz3c-gugf
34
vulnerability VCID-h324-unyb-sbac
35
vulnerability VCID-huxh-yrbr-s7bt
36
vulnerability VCID-jrfy-e6wv-1kbc
37
vulnerability VCID-kdkp-1ucy-w3g1
38
vulnerability VCID-m3y5-xa6w-83b6
39
vulnerability VCID-nz1v-4hgs-6yge
40
vulnerability VCID-p52x-ese3-qkha
41
vulnerability VCID-q6zd-khan-9yhj
42
vulnerability VCID-q7ye-13eq-vuhy
43
vulnerability VCID-qx3m-tcqj-ukc2
44
vulnerability VCID-r92s-4m4x-dqc7
45
vulnerability VCID-r94a-3fq2-efdg
46
vulnerability VCID-rfqz-nf3z-v3a3
47
vulnerability VCID-rg7k-kaxv-2ubx
48
vulnerability VCID-rsg7-5tup-4bd1
49
vulnerability VCID-s61k-e43h-13b5
50
vulnerability VCID-skd6-gqh8-sbba
51
vulnerability VCID-t4kd-zjrn-kueu
52
vulnerability VCID-t79w-jeyp-suaw
53
vulnerability VCID-tfky-edec-13gw
54
vulnerability VCID-u37s-5nn4-wqbx
55
vulnerability VCID-ujnp-2f3v-s3h3
56
vulnerability VCID-uzry-ts4t-fbc8
57
vulnerability VCID-vnh3-bvyq-13d6
58
vulnerability VCID-vqke-p81x-sffn
59
vulnerability VCID-w1c4-c4xs-yba4
60
vulnerability VCID-w5gg-jtut-qkcc
61
vulnerability VCID-wqg8-5kwe-vuem
62
vulnerability VCID-xqz3-k7ts-juck
63
vulnerability VCID-y3uj-myy6-kbha
64
vulnerability VCID-z9uf-p9w2-57fj
65
vulnerability VCID-zbfc-s76k-gfgv
66
vulnerability VCID-zm3q-aquc-pqg7
67
vulnerability VCID-zvn3-zvr5-buhg
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/jackson-databind@2.4.2-2
1
url pkg:deb/debian/jackson-databind@2.4.2-2%2Bdeb8u4
purl pkg:deb/debian/jackson-databind@2.4.2-2%2Bdeb8u4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-18u1-9nc1-2feh
1
vulnerability VCID-1uan-q6u8-affj
2
vulnerability VCID-1z31-s1cu-bbh4
3
vulnerability VCID-2uzw-pn14-p7a1
4
vulnerability VCID-314g-t8xy-5khg
5
vulnerability VCID-39mg-y1k8-xbf9
6
vulnerability VCID-4mtm-6bjh-7ka1
7
vulnerability VCID-4r6g-jwvd-1ke5
8
vulnerability VCID-4x8s-rj62-tqca
9
vulnerability VCID-5887-pcyq-nkht
10
vulnerability VCID-58n5-hqdf-xff2
11
vulnerability VCID-62jb-3d7y-y7ae
12
vulnerability VCID-7pd3-dre3-wug9
13
vulnerability VCID-7svn-u8ub-4faw
14
vulnerability VCID-7t7w-fq26-auc7
15
vulnerability VCID-88hx-kauy-4fcy
16
vulnerability VCID-89dx-2s8k-mufw
17
vulnerability VCID-8ec9-5qt4-duat
18
vulnerability VCID-8fr2-v728-cfcc
19
vulnerability VCID-8htk-33f4-4ufg
20
vulnerability VCID-8kwc-sxvr-skgp
21
vulnerability VCID-8mns-fyju-dqdr
22
vulnerability VCID-a7vm-mty5-9bhg
23
vulnerability VCID-auzw-j1fc-jff8
24
vulnerability VCID-c1uz-emh5-9fhe
25
vulnerability VCID-cnns-pjex-4ybt
26
vulnerability VCID-crra-28kn-mqab
27
vulnerability VCID-d6ez-jva8-hyag
28
vulnerability VCID-dd77-bpcr-zfam
29
vulnerability VCID-ez2q-xgz1-rkab
30
vulnerability VCID-fjz8-msfe-27hv
31
vulnerability VCID-fkct-tzwg-mkh8
32
vulnerability VCID-fqzk-v2gt-s7am
33
vulnerability VCID-gxpn-pz3c-gugf
34
vulnerability VCID-h324-unyb-sbac
35
vulnerability VCID-huxh-yrbr-s7bt
36
vulnerability VCID-jrfy-e6wv-1kbc
37
vulnerability VCID-kdkp-1ucy-w3g1
38
vulnerability VCID-m3y5-xa6w-83b6
39
vulnerability VCID-nz1v-4hgs-6yge
40
vulnerability VCID-p52x-ese3-qkha
41
vulnerability VCID-q6zd-khan-9yhj
42
vulnerability VCID-q7ye-13eq-vuhy
43
vulnerability VCID-qx3m-tcqj-ukc2
44
vulnerability VCID-r92s-4m4x-dqc7
45
vulnerability VCID-r94a-3fq2-efdg
46
vulnerability VCID-rfqz-nf3z-v3a3
47
vulnerability VCID-rg7k-kaxv-2ubx
48
vulnerability VCID-rsg7-5tup-4bd1
49
vulnerability VCID-s61k-e43h-13b5
50
vulnerability VCID-skd6-gqh8-sbba
51
vulnerability VCID-t4kd-zjrn-kueu
52
vulnerability VCID-t79w-jeyp-suaw
53
vulnerability VCID-tfky-edec-13gw
54
vulnerability VCID-u37s-5nn4-wqbx
55
vulnerability VCID-ujnp-2f3v-s3h3
56
vulnerability VCID-uzry-ts4t-fbc8
57
vulnerability VCID-vnh3-bvyq-13d6
58
vulnerability VCID-vqke-p81x-sffn
59
vulnerability VCID-w1c4-c4xs-yba4
60
vulnerability VCID-w5gg-jtut-qkcc
61
vulnerability VCID-wqg8-5kwe-vuem
62
vulnerability VCID-xqz3-k7ts-juck
63
vulnerability VCID-y3uj-myy6-kbha
64
vulnerability VCID-z9uf-p9w2-57fj
65
vulnerability VCID-zbfc-s76k-gfgv
66
vulnerability VCID-zm3q-aquc-pqg7
67
vulnerability VCID-zvn3-zvr5-buhg
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/jackson-databind@2.4.2-2%252Bdeb8u4
2
url pkg:deb/debian/jackson-databind@2.8.6-1%2Bdeb9u7
purl pkg:deb/debian/jackson-databind@2.8.6-1%2Bdeb9u7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-18u1-9nc1-2feh
1
vulnerability VCID-1uan-q6u8-affj
2
vulnerability VCID-1z31-s1cu-bbh4
3
vulnerability VCID-2uzw-pn14-p7a1
4
vulnerability VCID-314g-t8xy-5khg
5
vulnerability VCID-39mg-y1k8-xbf9
6
vulnerability VCID-4mtm-6bjh-7ka1
7
vulnerability VCID-4r6g-jwvd-1ke5
8
vulnerability VCID-4x8s-rj62-tqca
9
vulnerability VCID-5887-pcyq-nkht
10
vulnerability VCID-58n5-hqdf-xff2
11
vulnerability VCID-62jb-3d7y-y7ae
12
vulnerability VCID-7pd3-dre3-wug9
13
vulnerability VCID-7svn-u8ub-4faw
14
vulnerability VCID-7t7w-fq26-auc7
15
vulnerability VCID-88hx-kauy-4fcy
16
vulnerability VCID-89dx-2s8k-mufw
17
vulnerability VCID-8ec9-5qt4-duat
18
vulnerability VCID-8fr2-v728-cfcc
19
vulnerability VCID-8htk-33f4-4ufg
20
vulnerability VCID-8kwc-sxvr-skgp
21
vulnerability VCID-8mns-fyju-dqdr
22
vulnerability VCID-a7vm-mty5-9bhg
23
vulnerability VCID-auzw-j1fc-jff8
24
vulnerability VCID-c1uz-emh5-9fhe
25
vulnerability VCID-cnns-pjex-4ybt
26
vulnerability VCID-crra-28kn-mqab
27
vulnerability VCID-d6ez-jva8-hyag
28
vulnerability VCID-dd77-bpcr-zfam
29
vulnerability VCID-ez2q-xgz1-rkab
30
vulnerability VCID-fjz8-msfe-27hv
31
vulnerability VCID-fkct-tzwg-mkh8
32
vulnerability VCID-fqzk-v2gt-s7am
33
vulnerability VCID-gxpn-pz3c-gugf
34
vulnerability VCID-h324-unyb-sbac
35
vulnerability VCID-huxh-yrbr-s7bt
36
vulnerability VCID-jrfy-e6wv-1kbc
37
vulnerability VCID-kdkp-1ucy-w3g1
38
vulnerability VCID-m3y5-xa6w-83b6
39
vulnerability VCID-nz1v-4hgs-6yge
40
vulnerability VCID-p52x-ese3-qkha
41
vulnerability VCID-q6zd-khan-9yhj
42
vulnerability VCID-q7ye-13eq-vuhy
43
vulnerability VCID-qx3m-tcqj-ukc2
44
vulnerability VCID-r92s-4m4x-dqc7
45
vulnerability VCID-r94a-3fq2-efdg
46
vulnerability VCID-rfqz-nf3z-v3a3
47
vulnerability VCID-rg7k-kaxv-2ubx
48
vulnerability VCID-rsg7-5tup-4bd1
49
vulnerability VCID-s61k-e43h-13b5
50
vulnerability VCID-skd6-gqh8-sbba
51
vulnerability VCID-t4kd-zjrn-kueu
52
vulnerability VCID-t79w-jeyp-suaw
53
vulnerability VCID-tfky-edec-13gw
54
vulnerability VCID-u37s-5nn4-wqbx
55
vulnerability VCID-ujnp-2f3v-s3h3
56
vulnerability VCID-uzry-ts4t-fbc8
57
vulnerability VCID-vnh3-bvyq-13d6
58
vulnerability VCID-vqke-p81x-sffn
59
vulnerability VCID-w1c4-c4xs-yba4
60
vulnerability VCID-w5gg-jtut-qkcc
61
vulnerability VCID-wqg8-5kwe-vuem
62
vulnerability VCID-xqz3-k7ts-juck
63
vulnerability VCID-y3uj-myy6-kbha
64
vulnerability VCID-z9uf-p9w2-57fj
65
vulnerability VCID-zbfc-s76k-gfgv
66
vulnerability VCID-zm3q-aquc-pqg7
67
vulnerability VCID-zvn3-zvr5-buhg
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/jackson-databind@2.8.6-1%252Bdeb9u7
3
url pkg:deb/debian/jackson-databind@2.9.8-3%2Bdeb10u3
purl pkg:deb/debian/jackson-databind@2.9.8-3%2Bdeb10u3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1uan-q6u8-affj
1
vulnerability VCID-1z31-s1cu-bbh4
2
vulnerability VCID-314g-t8xy-5khg
3
vulnerability VCID-4mtm-6bjh-7ka1
4
vulnerability VCID-4r6g-jwvd-1ke5
5
vulnerability VCID-4x8s-rj62-tqca
6
vulnerability VCID-5887-pcyq-nkht
7
vulnerability VCID-58n5-hqdf-xff2
8
vulnerability VCID-7svn-u8ub-4faw
9
vulnerability VCID-7t7w-fq26-auc7
10
vulnerability VCID-88hx-kauy-4fcy
11
vulnerability VCID-89dx-2s8k-mufw
12
vulnerability VCID-8fr2-v728-cfcc
13
vulnerability VCID-8htk-33f4-4ufg
14
vulnerability VCID-8kwc-sxvr-skgp
15
vulnerability VCID-auzw-j1fc-jff8
16
vulnerability VCID-c1uz-emh5-9fhe
17
vulnerability VCID-cnns-pjex-4ybt
18
vulnerability VCID-crra-28kn-mqab
19
vulnerability VCID-dd77-bpcr-zfam
20
vulnerability VCID-fjz8-msfe-27hv
21
vulnerability VCID-fkct-tzwg-mkh8
22
vulnerability VCID-fqzk-v2gt-s7am
23
vulnerability VCID-gxpn-pz3c-gugf
24
vulnerability VCID-h324-unyb-sbac
25
vulnerability VCID-huxh-yrbr-s7bt
26
vulnerability VCID-jrfy-e6wv-1kbc
27
vulnerability VCID-nz1v-4hgs-6yge
28
vulnerability VCID-q6zd-khan-9yhj
29
vulnerability VCID-q7ye-13eq-vuhy
30
vulnerability VCID-qx3m-tcqj-ukc2
31
vulnerability VCID-r92s-4m4x-dqc7
32
vulnerability VCID-r94a-3fq2-efdg
33
vulnerability VCID-rfqz-nf3z-v3a3
34
vulnerability VCID-rsg7-5tup-4bd1
35
vulnerability VCID-s61k-e43h-13b5
36
vulnerability VCID-skd6-gqh8-sbba
37
vulnerability VCID-t4kd-zjrn-kueu
38
vulnerability VCID-ujnp-2f3v-s3h3
39
vulnerability VCID-uzry-ts4t-fbc8
40
vulnerability VCID-vnh3-bvyq-13d6
41
vulnerability VCID-vqke-p81x-sffn
42
vulnerability VCID-w1c4-c4xs-yba4
43
vulnerability VCID-w5gg-jtut-qkcc
44
vulnerability VCID-xqz3-k7ts-juck
45
vulnerability VCID-y3uj-myy6-kbha
46
vulnerability VCID-z9uf-p9w2-57fj
47
vulnerability VCID-zbfc-s76k-gfgv
48
vulnerability VCID-zm3q-aquc-pqg7
49
vulnerability VCID-zvn3-zvr5-buhg
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/jackson-databind@2.9.8-3%252Bdeb10u3
4
url pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.0.0
purl pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.0.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1uan-q6u8-affj
1
vulnerability VCID-4mtm-6bjh-7ka1
2
vulnerability VCID-5887-pcyq-nkht
3
vulnerability VCID-58n5-hqdf-xff2
4
vulnerability VCID-62jb-3d7y-y7ae
5
vulnerability VCID-7pd3-dre3-wug9
6
vulnerability VCID-7svn-u8ub-4faw
7
vulnerability VCID-88hx-kauy-4fcy
8
vulnerability VCID-8ec9-5qt4-duat
9
vulnerability VCID-8fr2-v728-cfcc
10
vulnerability VCID-8htk-33f4-4ufg
11
vulnerability VCID-8kwc-sxvr-skgp
12
vulnerability VCID-auzw-j1fc-jff8
13
vulnerability VCID-cnns-pjex-4ybt
14
vulnerability VCID-d6ez-jva8-hyag
15
vulnerability VCID-ez2q-xgz1-rkab
16
vulnerability VCID-fjz8-msfe-27hv
17
vulnerability VCID-fkct-tzwg-mkh8
18
vulnerability VCID-fqzk-v2gt-s7am
19
vulnerability VCID-h324-unyb-sbac
20
vulnerability VCID-jrfy-e6wv-1kbc
21
vulnerability VCID-kdkp-1ucy-w3g1
22
vulnerability VCID-m3y5-xa6w-83b6
23
vulnerability VCID-nz1v-4hgs-6yge
24
vulnerability VCID-p52x-ese3-qkha
25
vulnerability VCID-qx3m-tcqj-ukc2
26
vulnerability VCID-r92s-4m4x-dqc7
27
vulnerability VCID-rfqz-nf3z-v3a3
28
vulnerability VCID-rg7k-kaxv-2ubx
29
vulnerability VCID-s61k-e43h-13b5
30
vulnerability VCID-skd6-gqh8-sbba
31
vulnerability VCID-t4kd-zjrn-kueu
32
vulnerability VCID-t79w-jeyp-suaw
33
vulnerability VCID-tfky-edec-13gw
34
vulnerability VCID-ujnp-2f3v-s3h3
35
vulnerability VCID-uzry-ts4t-fbc8
36
vulnerability VCID-vnh3-bvyq-13d6
37
vulnerability VCID-vqke-p81x-sffn
38
vulnerability VCID-w7nq-y9sx-nfcc
39
vulnerability VCID-wqg8-5kwe-vuem
40
vulnerability VCID-xqz3-k7ts-juck
41
vulnerability VCID-zm3q-aquc-pqg7
42
vulnerability VCID-zvn3-zvr5-buhg
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.0.0
5
url pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.0
purl pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-18u1-9nc1-2feh
1
vulnerability VCID-1uan-q6u8-affj
2
vulnerability VCID-2uzw-pn14-p7a1
3
vulnerability VCID-39mg-y1k8-xbf9
4
vulnerability VCID-4r6g-jwvd-1ke5
5
vulnerability VCID-4x8s-rj62-tqca
6
vulnerability VCID-5887-pcyq-nkht
7
vulnerability VCID-62jb-3d7y-y7ae
8
vulnerability VCID-7pd3-dre3-wug9
9
vulnerability VCID-7svn-u8ub-4faw
10
vulnerability VCID-7t7w-fq26-auc7
11
vulnerability VCID-88hx-kauy-4fcy
12
vulnerability VCID-8ec9-5qt4-duat
13
vulnerability VCID-8fr2-v728-cfcc
14
vulnerability VCID-8htk-33f4-4ufg
15
vulnerability VCID-8kwc-sxvr-skgp
16
vulnerability VCID-8mns-fyju-dqdr
17
vulnerability VCID-auzw-j1fc-jff8
18
vulnerability VCID-cnns-pjex-4ybt
19
vulnerability VCID-d6ez-jva8-hyag
20
vulnerability VCID-ez2q-xgz1-rkab
21
vulnerability VCID-fjz8-msfe-27hv
22
vulnerability VCID-fkct-tzwg-mkh8
23
vulnerability VCID-fqzk-v2gt-s7am
24
vulnerability VCID-h324-unyb-sbac
25
vulnerability VCID-j1pk-ygx5-5bfd
26
vulnerability VCID-jrfy-e6wv-1kbc
27
vulnerability VCID-kdkp-1ucy-w3g1
28
vulnerability VCID-m3y5-xa6w-83b6
29
vulnerability VCID-nz1v-4hgs-6yge
30
vulnerability VCID-p52x-ese3-qkha
31
vulnerability VCID-qx3m-tcqj-ukc2
32
vulnerability VCID-r92s-4m4x-dqc7
33
vulnerability VCID-r94a-3fq2-efdg
34
vulnerability VCID-rfqz-nf3z-v3a3
35
vulnerability VCID-rg7k-kaxv-2ubx
36
vulnerability VCID-s61k-e43h-13b5
37
vulnerability VCID-skd6-gqh8-sbba
38
vulnerability VCID-t4kd-zjrn-kueu
39
vulnerability VCID-t79w-jeyp-suaw
40
vulnerability VCID-tfky-edec-13gw
41
vulnerability VCID-u37s-5nn4-wqbx
42
vulnerability VCID-ujnp-2f3v-s3h3
43
vulnerability VCID-uzry-ts4t-fbc8
44
vulnerability VCID-vnh3-bvyq-13d6
45
vulnerability VCID-vqke-p81x-sffn
46
vulnerability VCID-w1c4-c4xs-yba4
47
vulnerability VCID-w7nq-y9sx-nfcc
48
vulnerability VCID-wqg8-5kwe-vuem
49
vulnerability VCID-xqz3-k7ts-juck
50
vulnerability VCID-zbfc-s76k-gfgv
51
vulnerability VCID-zm3q-aquc-pqg7
52
vulnerability VCID-zvn3-zvr5-buhg
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.0
References
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-36179.json
reference_id
reference_type
scores
0
value 8.1
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-36179.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2020-36179
reference_id
reference_type
scores
0
value 0.61883
scoring_system epss
scoring_elements 0.98367
published_at 2026-06-08T12:55:00Z
1
value 0.61883
scoring_system epss
scoring_elements 0.98365
published_at 2026-06-09T12:55:00Z
2
value 0.61883
scoring_system epss
scoring_elements 0.98362
published_at 2026-06-04T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2020-36179
2
reference_url https://cowtowncoder.medium.com/on-jackson-cves-dont-panic-here-is-what-you-need-to-know-54cd0d6e8062
reference_id
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
2
value HIGH
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2024-05-25T04:00:53Z/
url https://cowtowncoder.medium.com/on-jackson-cves-dont-panic-here-is-what-you-need-to-know-54cd0d6e8062
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-36179
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-36179
4
reference_url https://github.com/FasterXML/jackson-databind
reference_id
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/FasterXML/jackson-databind
5
reference_url https://github.com/FasterXML/jackson-databind/commit/3ded28aece694d0df39c9f0fa1ff385b14a8656b
reference_id
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/FasterXML/jackson-databind/commit/3ded28aece694d0df39c9f0fa1ff385b14a8656b
6
reference_url https://github.com/FasterXML/jackson-databind/issues/3004
reference_id
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
2
value HIGH
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2024-05-25T04:00:53Z/
url https://github.com/FasterXML/jackson-databind/issues/3004
7
reference_url https://lists.apache.org/thread.html/rc255f41d9a61d3dc79a51fb5c713de4ae10e71e3673feeb0b180b436@%3Cissues.spark.apache.org%3E
reference_id
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://lists.apache.org/thread.html/rc255f41d9a61d3dc79a51fb5c713de4ae10e71e3673feeb0b180b436@%3Cissues.spark.apache.org%3E
8
reference_url https://lists.debian.org/debian-lts-announce/2021/04/msg00025.html
reference_id
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
2
value HIGH
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2024-05-25T04:00:53Z/
url https://lists.debian.org/debian-lts-announce/2021/04/msg00025.html
9
reference_url https://security.netapp.com/advisory/ntap-20210205-0005
reference_id
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://security.netapp.com/advisory/ntap-20210205-0005
10
reference_url https://www.oracle.com/security-alerts/cpuApr2021.html
reference_id
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
2
value HIGH
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2024-05-25T04:00:53Z/
url https://www.oracle.com/security-alerts/cpuApr2021.html
11
reference_url https://www.oracle.com/security-alerts/cpuapr2022.html
reference_id
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
2
value HIGH
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2024-05-25T04:00:53Z/
url https://www.oracle.com/security-alerts/cpuapr2022.html
12
reference_url https://www.oracle.com/security-alerts/cpujan2022.html
reference_id
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
2
value HIGH
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2024-05-25T04:00:53Z/
url https://www.oracle.com/security-alerts/cpujan2022.html
13
reference_url https://www.oracle.com//security-alerts/cpujul2021.html
reference_id
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
2
value HIGH
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2024-05-25T04:00:53Z/
url https://www.oracle.com//security-alerts/cpujul2021.html
14
reference_url https://www.oracle.com/security-alerts/cpujul2022.html
reference_id
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
2
value HIGH
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2024-05-25T04:00:53Z/
url https://www.oracle.com/security-alerts/cpujul2022.html
15
reference_url https://www.oracle.com/security-alerts/cpuoct2021.html
reference_id
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
2
value HIGH
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2024-05-25T04:00:53Z/
url https://www.oracle.com/security-alerts/cpuoct2021.html
16
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1913871
reference_id 1913871
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1913871
17
reference_url https://nvd.nist.gov/vuln/detail/CVE-2020-36179
reference_id CVE-2020-36179
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2020-36179
18
reference_url https://github.com/advisories/GHSA-9gph-22xh-8x98
reference_id GHSA-9gph-22xh-8x98
reference_type
scores
0
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-9gph-22xh-8x98
19
reference_url https://security.netapp.com/advisory/ntap-20210205-0005/
reference_id ntap-20210205-0005
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2024-05-25T04:00:53Z/
url https://security.netapp.com/advisory/ntap-20210205-0005/
20
reference_url https://lists.apache.org/thread.html/rc255f41d9a61d3dc79a51fb5c713de4ae10e71e3673feeb0b180b436%40%3Cissues.spark.apache.org%3E
reference_id rc255f41d9a61d3dc79a51fb5c713de4ae10e71e3673feeb0b180b436%40%3Cissues.spark.apache.org%3E
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2024-05-25T04:00:53Z/
url https://lists.apache.org/thread.html/rc255f41d9a61d3dc79a51fb5c713de4ae10e71e3673feeb0b180b436%40%3Cissues.spark.apache.org%3E
21
reference_url https://access.redhat.com/errata/RHSA-2021:1230
reference_id RHSA-2021:1230
reference_type
scores
url https://access.redhat.com/errata/RHSA-2021:1230
22
reference_url https://access.redhat.com/errata/RHSA-2021:1515
reference_id RHSA-2021:1515
reference_type
scores
url https://access.redhat.com/errata/RHSA-2021:1515
Weaknesses
0
cwe_id 502
name Deserialization of Untrusted Data
description The product deserializes untrusted data without sufficiently verifying that the resulting data will be valid.
1
cwe_id 937
name OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities
description Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2013.
2
cwe_id 1035
name OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
description Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2017.
Exploits
Severity_range_score7.0 - 8.9
Exploitability0.5
Weighted_severity8.0
Risk_score4.0
Resource_urlhttp://public2.vulnerablecode.io/vulnerabilities/VCID-fjz8-msfe-27hv