Search for packages
purl | pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.8 |
Vulnerability | Summary | Fixed by |
---|---|---|
VCID-121u-fy4e-aaah
Aliases: CVE-2019-17531 GHSA-gjmw-vf9h-g25v |
Polymorphic typing issue |
Affected by 41 other vulnerabilities. |
VCID-17rd-act7-aaac
Aliases: CVE-2018-14721 GHSA-9mxf-g3x6-wv74 |
High severity vulnerability that affects com.fasterxml.jackson.core:jackson-databind |
Affected by 51 other vulnerabilities. Affected by 48 other vulnerabilities. Affected by 58 other vulnerabilities. |
VCID-1ny7-27k8-aaas
Aliases: CVE-2019-14893 GHSA-qmqc-x3r4-6v39 |
Polymorphic deserialization of malicious object in jackson-databind |
Affected by 44 other vulnerabilities. Affected by 44 other vulnerabilities. |
VCID-1rm6-bsbu-aaam
Aliases: CVE-2020-9546 GHSA-5p34-5m6p-p58g |
jackson-databind mishandles the interaction between serialization gadgets and typing |
Affected by 47 other vulnerabilities. Affected by 40 other vulnerabilities. Affected by 26 other vulnerabilities. |
VCID-213j-gkjs-aaab
Aliases: CVE-2023-35116 |
** DISPUTED ** jackson-databind through 2.15.2 allows attackers to cause a denial of service or other unspecified impact via a crafted object that uses cyclic dependencies. NOTE: the vendor's perspective is that this is not a valid vulnerability report, because the steps of constructing a cyclic data structure and trying to serialize it cannot be achieved by an external attacker. |
Affected by 1 other vulnerability. Affected by 0 other vulnerabilities. |
VCID-22y8-4e3s-aaaa
Aliases: CVE-2018-19361 GHSA-mx9v-gmh4-mgqw |
High severity vulnerability that affects com.fasterxml.jackson.core:jackson-databind |
Affected by 51 other vulnerabilities. Affected by 48 other vulnerabilities. Affected by 54 other vulnerabilities. |
VCID-2j3e-p7eq-aaab
Aliases: CVE-2018-19362 GHSA-c8hm-7hpq-7jhg |
High severity vulnerability that affects com.fasterxml.jackson.core:jackson-databind |
Affected by 51 other vulnerabilities. Affected by 48 other vulnerabilities. Affected by 54 other vulnerabilities. |
VCID-2nyb-8rwu-aaag
Aliases: CVE-2020-36518 GHSA-57j2-w4cx-62h2 |
Deeply nested json in jackson-databind |
Affected by 3 other vulnerabilities. Affected by 4 other vulnerabilities. Affected by 3 other vulnerabilities. |
VCID-37nq-ncdy-aaak
Aliases: CVE-2019-16943 GHSA-fmmc-742q-jg75 |
Polymorphic typing issue |
Affected by 41 other vulnerabilities. |
VCID-3sj4-ck2n-aaac
Aliases: CVE-2021-20190 GHSA-5949-rw7g-wx7w |
Deserialization of untrusted data in jackson-databind |
Affected by 18 other vulnerabilities. |
VCID-4drb-uu12-aaan
Aliases: CVE-2019-14379 GHSA-6fpp-rgj9-8rwc |
Deserialization of untrusted data in FasterXML jackson-databind |
Affected by 47 other vulnerabilities. Affected by 43 other vulnerabilities. Affected by 49 other vulnerabilities. |
VCID-4dy3-g1ms-aaap
Aliases: CVE-2019-12814 GHSA-cmfg-87vq-g5g4 |
Deserialization of untrusted data in FasterXML jackson-databind |
Affected by 47 other vulnerabilities. Affected by 43 other vulnerabilities. Affected by 51 other vulnerabilities. |
VCID-4nbn-f9zy-aaab
Aliases: CVE-2020-36181 GHSA-cvm9-fjm9-3572 |
Unsafe Deserialization in jackson-databind |
Affected by 4 other vulnerabilities. |
VCID-4ne2-qmx5-aaaj
Aliases: CVE-2020-10673 GHSA-fqwf-pjwf-7vqv |
jackson-databind mishandles the interaction between serialization gadgets and typing |
Affected by 26 other vulnerabilities. |
VCID-4w75-wzwz-aaar
Aliases: CVE-2019-12086 GHSA-5ww9-j83m-q7qx |
Information exposure in FasterXML jackson-databind |
Affected by 47 other vulnerabilities. Affected by 43 other vulnerabilities. Affected by 53 other vulnerabilities. |
VCID-4y8y-m7z2-aaad
Aliases: CVE-2018-14720 GHSA-x2w5-5m2g-7h5m |
High severity vulnerability that affects com.fasterxml.jackson.core:jackson-databind |
Affected by 57 other vulnerabilities. Affected by 51 other vulnerabilities. Affected by 48 other vulnerabilities. Affected by 58 other vulnerabilities. |
VCID-5yjp-m4pq-aaak
Aliases: CVE-2017-7525 GHSA-qxxx-2pp7-5hmx |
A deserialization flaw was discovered in the jackson-databind |
Affected by 59 other vulnerabilities. Affected by 58 other vulnerabilities. Affected by 58 other vulnerabilities. |
VCID-6jz8-wj7d-aaae
Aliases: CVE-2019-14892 GHSA-cf6r-3wgc-h863 |
Polymorphic deserialization of malicious object in jackson-databind |
Affected by 44 other vulnerabilities. Affected by 44 other vulnerabilities. |
VCID-7rbq-92cj-aaar
Aliases: CVE-2020-24616 GHSA-h3cw-g4mq-c5x2 |
Code Injection in jackson-databind |
Affected by 20 other vulnerabilities. |
VCID-8dca-phs2-aaab
Aliases: CVE-2020-10650 GHSA-rpr3-cw39-3pxh GMS-2022-2955 |
jackson-databind before 2.9.10.4 vulnerable to unsafe deserialization |
Affected by 26 other vulnerabilities. |
VCID-8eu3-gcfv-aaas
Aliases: CVE-2019-17267 GHSA-f3j5-rmmp-3fc5 |
Improper Input Validation in jackson-databind |
Affected by 44 other vulnerabilities. |
VCID-8fk1-vaux-aaad
Aliases: CVE-2020-36188 GHSA-f9xh-2qgp-cq57 |
Unsafe Deserialization in jackson-databind |
Affected by 4 other vulnerabilities. |
VCID-amhg-ukhs-aaah
Aliases: CVE-2018-11307 GHSA-qr7j-h6gg-jmgc |
Deserialization of Untrusted Data in jackson-databind |
Affected by 55 other vulnerabilities. Affected by 51 other vulnerabilities. Affected by 62 other vulnerabilities. |
VCID-ay9g-1mux-aaap
Aliases: CVE-2020-36183 GHSA-9m6f-7xcq-8vf8 |
Unsafe Deserialization in jackson-databind |
Affected by 4 other vulnerabilities. |
VCID-b6wb-a6hz-aaan
Aliases: CVE-2020-35728 GHSA-5r5r-6hpj-8gg9 |
Serialization gadget exploit in jackson-databind |
Affected by 4 other vulnerabilities. |
VCID-bbcf-8uz7-aaag
Aliases: CVE-2018-19360 GHSA-f9hv-mg5h-xcw9 |
High severity vulnerability that affects com.fasterxml.jackson.core:jackson-databind |
Affected by 51 other vulnerabilities. Affected by 48 other vulnerabilities. Affected by 54 other vulnerabilities. |
VCID-byh6-2vn3-aaaa
Aliases: CVE-2020-10969 GHSA-758m-v56v-grj4 |
jackson-databind mishandles the interaction between serialization gadgets and typing |
Affected by 47 other vulnerabilities. Affected by 40 other vulnerabilities. Affected by 26 other vulnerabilities. |
VCID-d96z-ne4f-aaae
Aliases: CVE-2020-9547 GHSA-q93h-jc49-78gg |
jackson-databind mishandles the interaction between serialization gadgets and typing |
Affected by 47 other vulnerabilities. Affected by 40 other vulnerabilities. Affected by 26 other vulnerabilities. |
VCID-dgpf-mnew-aaar
Aliases: CVE-2019-14540 GHSA-h822-r4r5-v8jg |
Polymorphic Typing issue in FasterXML jackson-databind |
Affected by 44 other vulnerabilities. |
VCID-dkg8-h8xm-aaas
Aliases: CVE-2018-12023 GHSA-6wqp-v4v6-c87c |
Deserialization of Untrusted Data |
Affected by 55 other vulnerabilities. Affected by 51 other vulnerabilities. Affected by 62 other vulnerabilities. |
VCID-e4fz-gcnp-aaap
Aliases: CVE-2019-16335 GHSA-85cw-hj65-qqv9 |
Polymorphic Typing issue in FasterXML jackson-databind |
Affected by 44 other vulnerabilities. |
VCID-e4hg-3b6p-aaam
Aliases: CVE-2019-12384 GHSA-mph4-vhrx-mv67 |
Deserialization of Untrusted Data in FasterXML jackson-databind |
Affected by 47 other vulnerabilities. Affected by 43 other vulnerabilities. Affected by 51 other vulnerabilities. |
VCID-efvk-eu3s-aaaf
Aliases: CVE-2020-9548 GHSA-p43x-xfjf-5jhr |
jackson-databind mishandles the interaction between serialization gadgets and typing |
Affected by 47 other vulnerabilities. Affected by 40 other vulnerabilities. Affected by 26 other vulnerabilities. |
VCID-eps5-dhv3-aaam
Aliases: CVE-2017-15095 GHSA-h592-38cm-4ggp |
High severity vulnerability that affects com.fasterxml.jackson.core:jackson-databind |
Affected by 57 other vulnerabilities. Affected by 57 other vulnerabilities. Affected by 56 other vulnerabilities. Affected by 69 other vulnerabilities. Affected by 68 other vulnerabilities. Affected by 66 other vulnerabilities. |
VCID-f3h3-7htd-aaar
Aliases: CVE-2020-8840 GHSA-4w82-r329-3q67 |
Deserialization of Untrusted Data in jackson-databind |
Affected by 47 other vulnerabilities. Affected by 44 other vulnerabilities. Affected by 39 other vulnerabilities. |
VCID-fd1j-9f1w-aaas
Aliases: CVE-2020-36185 GHSA-8w26-6f25-cm9x |
Unsafe Deserialization in jackson-databind |
Affected by 4 other vulnerabilities. |
VCID-gd27-wvvh-aaaf
Aliases: CVE-2020-36186 GHSA-v585-23hc-c647 |
Unsafe Deserialization in jackson-databind |
Affected by 4 other vulnerabilities. |
VCID-gqhw-ngh8-aaap
Aliases: CVE-2022-42004 GHSA-rgv9-q543-rqg4 |
Deserialization of Untrusted Data in FasterXML jackson-databind |
Affected by 3 other vulnerabilities. Affected by 2 other vulnerabilities. |
VCID-gt54-kr2s-aaap
Aliases: CVE-2018-14719 GHSA-4gq5-ch57-c2mg |
High severity vulnerability that affects com.fasterxml.jackson.core:jackson-databind |
Affected by 51 other vulnerabilities. Affected by 48 other vulnerabilities. Affected by 58 other vulnerabilities. |
VCID-jnwp-r7y6-aaak
Aliases: CVE-2020-36179 GHSA-9gph-22xh-8x98 |
Unsafe Deserialization in jackson-databind |
Affected by 4 other vulnerabilities. |
VCID-jshw-wv7j-aaac
Aliases: CVE-2018-7489 GHSA-cggj-fvv3-cqwv |
FasterXML jackson-databind allows unauthenticated remote code execution |
Affected by 57 other vulnerabilities. Affected by 54 other vulnerabilities. Affected by 65 other vulnerabilities. |
VCID-jt34-h6ym-aaad
Aliases: CVE-2018-1000873 GHSA-h4x4-5qp2-wp46 |
Moderate severity vulnerability that affects com.fasterxml.jackson.datatype:jackson-datatype-jsr353 |
Affected by 54 other vulnerabilities. |
VCID-k2v8-yw9j-aaaa
Aliases: CVE-2020-36182 GHSA-89qr-369f-5m5x |
Unsafe Deserialization in jackson-databind |
Affected by 4 other vulnerabilities. |
VCID-k3k5-dhdn-aaah
Aliases: CVE-2020-25649 GHSA-288c-cq4h-88gq |
XML External Entity (XXE) Injection in Jackson Databind |
Affected by 18 other vulnerabilities. Affected by 6 other vulnerabilities. Affected by 5 other vulnerabilities. |
VCID-khga-7sd1-aaac
Aliases: CVE-2019-20330 GHSA-gww7-p5w4-wrfv |
Deserialization of Untrusted Data in jackson-databind |
Affected by 47 other vulnerabilities. Affected by 44 other vulnerabilities. Affected by 40 other vulnerabilities. |
VCID-ma6j-2mnt-aaas
Aliases: CVE-2020-36180 GHSA-8c4j-34r4-xr8g |
Unsafe Deserialization in jackson-databind |
Affected by 4 other vulnerabilities. |
VCID-q66e-967t-aaah
Aliases: CVE-2018-14718 GHSA-645p-88qh-w398 |
High severity vulnerability that affects com.fasterxml.jackson.core:jackson-databind |
Affected by 51 other vulnerabilities. Affected by 48 other vulnerabilities. Affected by 58 other vulnerabilities. |
VCID-qhrk-7tpg-aaah
Aliases: CVE-2017-17485 GHSA-rfx6-vp9g-rh7v |
High severity vulnerability that affects com.fasterxml.jackson.core:jackson-databind |
Affected by 56 other vulnerabilities. Affected by 66 other vulnerabilities. |
VCID-t7e4-g3fr-aaan
Aliases: CVE-2022-42003 GHSA-jjjh-jjxp-wpff |
Deserialization of Untrusted Data in FasterXML jackson-databind |
Affected by 3 other vulnerabilities. Affected by 3 other vulnerabilities. Affected by 2 other vulnerabilities. Affected by 2 other vulnerabilities. Affected by 1 other vulnerability. |
VCID-tf5v-nt3x-aaan
Aliases: CVE-2019-14439 GHSA-gwp4-hfv6-p7hw |
Deserialization of untrusted data in FasterXML jackson-databind |
Affected by 47 other vulnerabilities. Affected by 43 other vulnerabilities. Affected by 0 other vulnerabilities. Affected by 49 other vulnerabilities. |
VCID-twub-bczj-aaah
Aliases: CVE-2020-36189 GHSA-vfqx-33qm-g869 |
Unsafe Deserialization in jackson-databind |
Affected by 4 other vulnerabilities. |
VCID-vaet-ekgb-aaak
Aliases: CVE-2020-35490 GHSA-wh8g-3j2c-rqj5 |
Serialization gadgets exploit in jackson-databind |
Affected by 4 other vulnerabilities. |
VCID-vaq8-9f2s-aaag
Aliases: CVE-2019-16942 GHSA-mx7p-6679-8g3q |
Polymorphic Typing in FasterXML jackson-databind |
Affected by 41 other vulnerabilities. |
VCID-vpmx-ghg3-aaaj
Aliases: CVE-2020-36184 GHSA-m6x4-97wx-4q27 |
Unsafe Deserialization in jackson-databind |
Affected by 4 other vulnerabilities. |
VCID-wanu-687f-aaag
Aliases: CVE-2020-35491 GHSA-r3gr-cxrf-hg25 |
Serialization gadgets exploit in jackson-databind |
Affected by 4 other vulnerabilities. |
VCID-wwax-sg2v-aaag
Aliases: CVE-2018-12022 GHSA-cjjf-94ff-43w7 GHSA-wrr7-33fx-rcvj |
High severity vulnerability that affects com.fasterxml.jackson.core:jackson-databind |
Affected by 55 other vulnerabilities. Affected by 51 other vulnerabilities. Affected by 62 other vulnerabilities. |
VCID-x5kz-bhzn-aaap
Aliases: CVE-2020-24750 GHSA-qjw2-hr98-qgfh |
Unsafe Deserialization in jackson-databind |
Affected by 20 other vulnerabilities. |
VCID-xegf-xmqz-aaaq
Aliases: CVE-2018-5968 GHSA-w3f4-3q6j-rh82 |
Deserialization of Untrusted Data in jackson-databind |
Affected by 51 other vulnerabilities. Affected by 56 other vulnerabilities. Affected by 54 other vulnerabilities. Affected by 66 other vulnerabilities. |
VCID-yvj4-rdyw-aaaa
Aliases: CVE-2020-36187 GHSA-r695-7vr9-jgc2 |
Unsafe Deserialization in jackson-databind |
Affected by 4 other vulnerabilities. |
Vulnerability | Summary | Aliases |
---|---|---|
This package is not known to fix vulnerabilities. |