Search for packages
Package details: pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.0
purl pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.0
Tags Ghost
Next non-vulnerable version 2.16.0
Latest non-vulnerable version 2.16.0
Risk 10.0
Vulnerabilities affecting this package (1)
Vulnerability Summary Fixed by
VCID-jshw-wv7j-aaac
Aliases:
CVE-2018-7489
GHSA-cggj-fvv3-cqwv
FasterXML jackson-databind allows unauthenticated remote code execution
2.8.11.1
Affected by 54 other vulnerabilities.
2.9.5
Affected by 65 other vulnerabilities.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2025-03-28T20:02:59.795034+00:00 GHSA Importer Affected by VCID-jshw-wv7j-aaac None 36.0.0
2024-09-17T22:00:50.391121+00:00 GHSA Importer Affected by VCID-jshw-wv7j-aaac https://github.com/advisories/GHSA-cggj-fvv3-cqwv 34.0.1
2024-04-23T17:39:53.191215+00:00 GHSA Importer Affected by VCID-jshw-wv7j-aaac https://github.com/advisories/GHSA-cggj-fvv3-cqwv 34.0.0rc4
2024-01-03T17:39:53.790391+00:00 GHSA Importer Affected by VCID-jshw-wv7j-aaac https://github.com/advisories/GHSA-cggj-fvv3-cqwv 34.0.0rc1