Search for packages
Package details: pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.10.5.0
purl pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.10.5.0
Tags Ghost
Next non-vulnerable version 2.16.0
Latest non-vulnerable version 2.16.0
Risk 4.0
Vulnerabilities affecting this package (1)
Vulnerability Summary Fixed by
VCID-k3k5-dhdn-aaah
Aliases:
CVE-2020-25649
GHSA-288c-cq4h-88gq
XML External Entity (XXE) Injection in Jackson Databind
2.10.5.1
Affected by 5 other vulnerabilities.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2025-03-28T20:04:47.535072+00:00 GHSA Importer Affected by VCID-k3k5-dhdn-aaah None 36.0.0
2024-09-17T22:00:32.138883+00:00 GHSA Importer Affected by VCID-k3k5-dhdn-aaah https://github.com/advisories/GHSA-288c-cq4h-88gq 34.0.1
2024-04-23T17:39:35.509513+00:00 GHSA Importer Affected by VCID-k3k5-dhdn-aaah https://github.com/advisories/GHSA-288c-cq4h-88gq 34.0.0rc4
2024-01-03T17:40:10.104737+00:00 GHSA Importer Affected by VCID-k3k5-dhdn-aaah https://github.com/advisories/GHSA-288c-cq4h-88gq 34.0.0rc1