Search for packages
purl | pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.10.7 |
Vulnerability | Summary | Fixed by |
---|---|---|
VCID-213j-gkjs-aaab
Aliases: CVE-2023-35116 |
** DISPUTED ** jackson-databind through 2.15.2 allows attackers to cause a denial of service or other unspecified impact via a crafted object that uses cyclic dependencies. NOTE: the vendor's perspective is that this is not a valid vulnerability report, because the steps of constructing a cyclic data structure and trying to serialize it cannot be achieved by an external attacker. |
Affected by 1 other vulnerability. Affected by 0 other vulnerabilities. |
VCID-2nyb-8rwu-aaag
Aliases: CVE-2020-36518 GHSA-57j2-w4cx-62h2 |
Deeply nested json in jackson-databind |
Affected by 3 other vulnerabilities. Affected by 4 other vulnerabilities. Affected by 3 other vulnerabilities. |
VCID-4nbn-f9zy-aaab
Aliases: CVE-2020-36181 GHSA-cvm9-fjm9-3572 |
Unsafe Deserialization in jackson-databind |
Affected by 4 other vulnerabilities. |
VCID-8fk1-vaux-aaad
Aliases: CVE-2020-36188 GHSA-f9xh-2qgp-cq57 |
Unsafe Deserialization in jackson-databind |
Affected by 4 other vulnerabilities. |
VCID-ay9g-1mux-aaap
Aliases: CVE-2020-36183 GHSA-9m6f-7xcq-8vf8 |
Unsafe Deserialization in jackson-databind |
Affected by 4 other vulnerabilities. |
VCID-b6wb-a6hz-aaan
Aliases: CVE-2020-35728 GHSA-5r5r-6hpj-8gg9 |
Serialization gadget exploit in jackson-databind |
Affected by 4 other vulnerabilities. |
VCID-fd1j-9f1w-aaas
Aliases: CVE-2020-36185 GHSA-8w26-6f25-cm9x |
Unsafe Deserialization in jackson-databind |
Affected by 4 other vulnerabilities. |
VCID-gd27-wvvh-aaaf
Aliases: CVE-2020-36186 GHSA-v585-23hc-c647 |
Unsafe Deserialization in jackson-databind |
Affected by 4 other vulnerabilities. |
VCID-gqhw-ngh8-aaap
Aliases: CVE-2022-42004 GHSA-rgv9-q543-rqg4 |
Deserialization of Untrusted Data in FasterXML jackson-databind |
Affected by 3 other vulnerabilities. Affected by 2 other vulnerabilities. |
VCID-jnwp-r7y6-aaak
Aliases: CVE-2020-36179 GHSA-9gph-22xh-8x98 |
Unsafe Deserialization in jackson-databind |
Affected by 4 other vulnerabilities. |
VCID-k2v8-yw9j-aaaa
Aliases: CVE-2020-36182 GHSA-89qr-369f-5m5x |
Unsafe Deserialization in jackson-databind |
Affected by 4 other vulnerabilities. |
VCID-ma6j-2mnt-aaas
Aliases: CVE-2020-36180 GHSA-8c4j-34r4-xr8g |
Unsafe Deserialization in jackson-databind |
Affected by 4 other vulnerabilities. |
VCID-t7e4-g3fr-aaan
Aliases: CVE-2022-42003 GHSA-jjjh-jjxp-wpff |
Deserialization of Untrusted Data in FasterXML jackson-databind |
Affected by 3 other vulnerabilities. Affected by 3 other vulnerabilities. Affected by 2 other vulnerabilities. Affected by 2 other vulnerabilities. Affected by 1 other vulnerability. |
VCID-twub-bczj-aaah
Aliases: CVE-2020-36189 GHSA-vfqx-33qm-g869 |
Unsafe Deserialization in jackson-databind |
Affected by 4 other vulnerabilities. |
VCID-vaet-ekgb-aaak
Aliases: CVE-2020-35490 GHSA-wh8g-3j2c-rqj5 |
Serialization gadgets exploit in jackson-databind |
Affected by 4 other vulnerabilities. |
VCID-vpmx-ghg3-aaaj
Aliases: CVE-2020-36184 GHSA-m6x4-97wx-4q27 |
Unsafe Deserialization in jackson-databind |
Affected by 4 other vulnerabilities. |
VCID-wanu-687f-aaag
Aliases: CVE-2020-35491 GHSA-r3gr-cxrf-hg25 |
Serialization gadgets exploit in jackson-databind |
Affected by 4 other vulnerabilities. |
VCID-yvj4-rdyw-aaaa
Aliases: CVE-2020-36187 GHSA-r695-7vr9-jgc2 |
Unsafe Deserialization in jackson-databind |
Affected by 4 other vulnerabilities. |
Vulnerability | Summary | Aliases |
---|---|---|
VCID-3sj4-ck2n-aaac | Deserialization of untrusted data in jackson-databind |
CVE-2021-20190
GHSA-5949-rw7g-wx7w |
VCID-k3k5-dhdn-aaah | XML External Entity (XXE) Injection in Jackson Databind |
CVE-2020-25649
GHSA-288c-cq4h-88gq |