Search for packages
purl | pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.0.0-RC2 |
Vulnerability | Summary | Fixed by |
---|---|---|
VCID-121u-fy4e-aaah
Aliases: CVE-2019-17531 GHSA-gjmw-vf9h-g25v |
Polymorphic typing issue |
Affected by 41 other vulnerabilities. |
VCID-1ny7-27k8-aaas
Aliases: CVE-2019-14893 GHSA-qmqc-x3r4-6v39 |
Polymorphic deserialization of malicious object in jackson-databind |
Affected by 44 other vulnerabilities. Affected by 44 other vulnerabilities. |
VCID-213j-gkjs-aaab
Aliases: CVE-2023-35116 |
** DISPUTED ** jackson-databind through 2.15.2 allows attackers to cause a denial of service or other unspecified impact via a crafted object that uses cyclic dependencies. NOTE: the vendor's perspective is that this is not a valid vulnerability report, because the steps of constructing a cyclic data structure and trying to serialize it cannot be achieved by an external attacker. |
Affected by 1 other vulnerability. Affected by 0 other vulnerabilities. |
VCID-2nyb-8rwu-aaag
Aliases: CVE-2020-36518 GHSA-57j2-w4cx-62h2 |
Deeply nested json in jackson-databind |
Affected by 3 other vulnerabilities. Affected by 4 other vulnerabilities. Affected by 3 other vulnerabilities. |
VCID-37nq-ncdy-aaak
Aliases: CVE-2019-16943 GHSA-fmmc-742q-jg75 |
Polymorphic typing issue |
Affected by 41 other vulnerabilities. |
VCID-3sj4-ck2n-aaac
Aliases: CVE-2021-20190 GHSA-5949-rw7g-wx7w |
Deserialization of untrusted data in jackson-databind |
Affected by 18 other vulnerabilities. |
VCID-4drb-uu12-aaan
Aliases: CVE-2019-14379 GHSA-6fpp-rgj9-8rwc |
Deserialization of untrusted data in FasterXML jackson-databind |
Affected by 47 other vulnerabilities. Affected by 43 other vulnerabilities. Affected by 49 other vulnerabilities. |
VCID-5yjp-m4pq-aaak
Aliases: CVE-2017-7525 GHSA-qxxx-2pp7-5hmx |
A deserialization flaw was discovered in the jackson-databind |
Affected by 55 other vulnerabilities. Affected by 59 other vulnerabilities. Affected by 58 other vulnerabilities. Affected by 58 other vulnerabilities. |
VCID-6jz8-wj7d-aaae
Aliases: CVE-2019-14892 GHSA-cf6r-3wgc-h863 |
Polymorphic deserialization of malicious object in jackson-databind |
Affected by 49 other vulnerabilities. Affected by 44 other vulnerabilities. Affected by 44 other vulnerabilities. |
VCID-8dca-phs2-aaab
Aliases: CVE-2020-10650 GHSA-rpr3-cw39-3pxh GMS-2022-2955 |
jackson-databind before 2.9.10.4 vulnerable to unsafe deserialization |
Affected by 26 other vulnerabilities. |
VCID-8eu3-gcfv-aaas
Aliases: CVE-2019-17267 GHSA-f3j5-rmmp-3fc5 |
Improper Input Validation in jackson-databind |
Affected by 44 other vulnerabilities. |
VCID-dgpf-mnew-aaar
Aliases: CVE-2019-14540 GHSA-h822-r4r5-v8jg |
Polymorphic Typing issue in FasterXML jackson-databind |
Affected by 44 other vulnerabilities. |
VCID-e4fz-gcnp-aaap
Aliases: CVE-2019-16335 GHSA-85cw-hj65-qqv9 |
Polymorphic Typing issue in FasterXML jackson-databind |
Affected by 44 other vulnerabilities. |
VCID-e4hg-3b6p-aaam
Aliases: CVE-2019-12384 GHSA-mph4-vhrx-mv67 |
Deserialization of Untrusted Data in FasterXML jackson-databind |
Affected by 47 other vulnerabilities. Affected by 43 other vulnerabilities. Affected by 51 other vulnerabilities. |
VCID-eps5-dhv3-aaam
Aliases: CVE-2017-15095 GHSA-h592-38cm-4ggp |
High severity vulnerability that affects com.fasterxml.jackson.core:jackson-databind |
Affected by 57 other vulnerabilities. Affected by 57 other vulnerabilities. Affected by 56 other vulnerabilities. Affected by 69 other vulnerabilities. Affected by 68 other vulnerabilities. Affected by 66 other vulnerabilities. |
VCID-gqhw-ngh8-aaap
Aliases: CVE-2022-42004 GHSA-rgv9-q543-rqg4 |
Deserialization of Untrusted Data in FasterXML jackson-databind |
Affected by 3 other vulnerabilities. Affected by 2 other vulnerabilities. |
VCID-jshw-wv7j-aaac
Aliases: CVE-2018-7489 GHSA-cggj-fvv3-cqwv |
FasterXML jackson-databind allows unauthenticated remote code execution |
Affected by 57 other vulnerabilities. Affected by 54 other vulnerabilities. Affected by 65 other vulnerabilities. |
VCID-jt34-h6ym-aaad
Aliases: CVE-2018-1000873 GHSA-h4x4-5qp2-wp46 |
Moderate severity vulnerability that affects com.fasterxml.jackson.datatype:jackson-datatype-jsr353 |
Affected by 54 other vulnerabilities. |
VCID-k3k5-dhdn-aaah
Aliases: CVE-2020-25649 GHSA-288c-cq4h-88gq |
XML External Entity (XXE) Injection in Jackson Databind |
Affected by 46 other vulnerabilities. Affected by 18 other vulnerabilities. Affected by 6 other vulnerabilities. Affected by 5 other vulnerabilities. |
VCID-q66e-967t-aaah
Aliases: CVE-2018-14718 GHSA-645p-88qh-w398 |
High severity vulnerability that affects com.fasterxml.jackson.core:jackson-databind |
Affected by 51 other vulnerabilities. Affected by 51 other vulnerabilities. Affected by 48 other vulnerabilities. Affected by 58 other vulnerabilities. |
VCID-qhrk-7tpg-aaah
Aliases: CVE-2017-17485 GHSA-rfx6-vp9g-rh7v |
High severity vulnerability that affects com.fasterxml.jackson.core:jackson-databind |
Affected by 56 other vulnerabilities. Affected by 66 other vulnerabilities. |
VCID-t7e4-g3fr-aaan
Aliases: CVE-2022-42003 GHSA-jjjh-jjxp-wpff |
Deserialization of Untrusted Data in FasterXML jackson-databind |
Affected by 3 other vulnerabilities. Affected by 3 other vulnerabilities. Affected by 2 other vulnerabilities. Affected by 2 other vulnerabilities. Affected by 1 other vulnerability. |
VCID-tf5v-nt3x-aaan
Aliases: CVE-2019-14439 GHSA-gwp4-hfv6-p7hw |
Deserialization of untrusted data in FasterXML jackson-databind |
Affected by 47 other vulnerabilities. Affected by 43 other vulnerabilities. Affected by 0 other vulnerabilities. Affected by 49 other vulnerabilities. |
VCID-twub-bczj-aaah
Aliases: CVE-2020-36189 GHSA-vfqx-33qm-g869 |
Unsafe Deserialization in jackson-databind |
Affected by 4 other vulnerabilities. |
VCID-wwax-sg2v-aaag
Aliases: CVE-2018-12022 GHSA-cjjf-94ff-43w7 GHSA-wrr7-33fx-rcvj |
High severity vulnerability that affects com.fasterxml.jackson.core:jackson-databind |
Affected by 55 other vulnerabilities. Affected by 51 other vulnerabilities. Affected by 62 other vulnerabilities. |
VCID-xegf-xmqz-aaaq
Aliases: CVE-2018-5968 GHSA-w3f4-3q6j-rh82 |
Deserialization of Untrusted Data in jackson-databind |
Affected by 51 other vulnerabilities. Affected by 56 other vulnerabilities. Affected by 54 other vulnerabilities. Affected by 66 other vulnerabilities. |
Vulnerability | Summary | Aliases |
---|---|---|
This package is not known to fix vulnerabilities. |