VulnerableCode Package Details - pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.0.0

Search for packages

Package details: pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.0.0

Essentials
History (4)

purl	pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.0.0
Tags	Ghost

Next non-vulnerable version	2.16.0
Latest non-vulnerable version	2.16.0
Risk	4.0

Vulnerabilities affecting this package (1)

Vulnerability	Summary	Fixed by
VCID-k3k5-dhdn-aaah Aliases: CVE-2020-25649 GHSA-288c-cq4h-88gq	XML External Entity (XXE) Injection in Jackson Databind	2.9.10.7 Affected by 18 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} 2.10.5 Affected by 6 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} 2.10.5.1 Affected by 5 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }}

Vulnerability

Summary

Fixed by

VCID-k3k5-dhdn-aaah
Aliases:
CVE-2020-25649
GHSA-288c-cq4h-88gq

XML External Entity (XXE) Injection in Jackson Databind

2.9.10.7
Affected by 18 other vulnerabilities.

2.10.5
Affected by 6 other vulnerabilities.

2.10.5.1
Affected by 5 other vulnerabilities.

Vulnerabilities fixed by this package (0)

Vulnerability	Summary	Aliases
This package is not known to fix vulnerabilities.

Date	Actor	Action	Vulnerability	Source	VulnerableCode Version
2025-03-28T20:04:47.690640+00:00	GHSA Importer	Affected by	VCID-k3k5-dhdn-aaah	None	36.0.0
2024-09-17T22:00:32.307272+00:00	GHSA Importer	Affected by	VCID-k3k5-dhdn-aaah	https://github.com/advisories/GHSA-288c-cq4h-88gq	34.0.1
2024-04-23T17:39:35.698073+00:00	GHSA Importer	Affected by	VCID-k3k5-dhdn-aaah	https://github.com/advisories/GHSA-288c-cq4h-88gq	34.0.0rc4
2024-01-03T17:40:10.287299+00:00	GHSA Importer	Affected by	VCID-k3k5-dhdn-aaah	https://github.com/advisories/GHSA-288c-cq4h-88gq	34.0.0rc1