Search for packages
purl | pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.10.5 |
Vulnerability | Summary | Fixed by |
---|---|---|
VCID-213j-gkjs-aaab
Aliases: CVE-2023-35116 |
** DISPUTED ** jackson-databind through 2.15.2 allows attackers to cause a denial of service or other unspecified impact via a crafted object that uses cyclic dependencies. NOTE: the vendor's perspective is that this is not a valid vulnerability report, because the steps of constructing a cyclic data structure and trying to serialize it cannot be achieved by an external attacker. |
Affected by 1 other vulnerability. Affected by 0 other vulnerabilities. |
VCID-2nyb-8rwu-aaag
Aliases: CVE-2020-36518 GHSA-57j2-w4cx-62h2 |
Deeply nested json in jackson-databind |
Affected by 3 other vulnerabilities. Affected by 4 other vulnerabilities. Affected by 3 other vulnerabilities. |
VCID-3sj4-ck2n-aaac
Aliases: CVE-2021-20190 GHSA-5949-rw7g-wx7w |
Deserialization of untrusted data in jackson-databind |
Affected by 18 other vulnerabilities. |
VCID-4nbn-f9zy-aaab
Aliases: CVE-2020-36181 GHSA-cvm9-fjm9-3572 |
Unsafe Deserialization in jackson-databind |
Affected by 4 other vulnerabilities. |
VCID-7rbq-92cj-aaar
Aliases: CVE-2020-24616 GHSA-h3cw-g4mq-c5x2 |
Code Injection in jackson-databind |
Affected by 20 other vulnerabilities. |
VCID-8fk1-vaux-aaad
Aliases: CVE-2020-36188 GHSA-f9xh-2qgp-cq57 |
Unsafe Deserialization in jackson-databind |
Affected by 4 other vulnerabilities. |
VCID-ay9g-1mux-aaap
Aliases: CVE-2020-36183 GHSA-9m6f-7xcq-8vf8 |
Unsafe Deserialization in jackson-databind |
Affected by 4 other vulnerabilities. |
VCID-b6wb-a6hz-aaan
Aliases: CVE-2020-35728 GHSA-5r5r-6hpj-8gg9 |
Serialization gadget exploit in jackson-databind |
Affected by 4 other vulnerabilities. |
VCID-fd1j-9f1w-aaas
Aliases: CVE-2020-36185 GHSA-8w26-6f25-cm9x |
Unsafe Deserialization in jackson-databind |
Affected by 4 other vulnerabilities. |
VCID-gd27-wvvh-aaaf
Aliases: CVE-2020-36186 GHSA-v585-23hc-c647 |
Unsafe Deserialization in jackson-databind |
Affected by 4 other vulnerabilities. |
VCID-gqhw-ngh8-aaap
Aliases: CVE-2022-42004 GHSA-rgv9-q543-rqg4 |
Deserialization of Untrusted Data in FasterXML jackson-databind |
Affected by 3 other vulnerabilities. Affected by 2 other vulnerabilities. |
VCID-jnwp-r7y6-aaak
Aliases: CVE-2020-36179 GHSA-9gph-22xh-8x98 |
Unsafe Deserialization in jackson-databind |
Affected by 4 other vulnerabilities. |
VCID-k2v8-yw9j-aaaa
Aliases: CVE-2020-36182 GHSA-89qr-369f-5m5x |
Unsafe Deserialization in jackson-databind |
Affected by 4 other vulnerabilities. |
VCID-k3k5-dhdn-aaah
Aliases: CVE-2020-25649 GHSA-288c-cq4h-88gq |
XML External Entity (XXE) Injection in Jackson Databind |
Affected by 18 other vulnerabilities. Affected by 6 other vulnerabilities. Affected by 5 other vulnerabilities. |
VCID-ma6j-2mnt-aaas
Aliases: CVE-2020-36180 GHSA-8c4j-34r4-xr8g |
Unsafe Deserialization in jackson-databind |
Affected by 4 other vulnerabilities. |
VCID-t7e4-g3fr-aaan
Aliases: CVE-2022-42003 GHSA-jjjh-jjxp-wpff |
Deserialization of Untrusted Data in FasterXML jackson-databind |
Affected by 3 other vulnerabilities. Affected by 3 other vulnerabilities. Affected by 2 other vulnerabilities. Affected by 2 other vulnerabilities. Affected by 1 other vulnerability. |
VCID-twub-bczj-aaah
Aliases: CVE-2020-36189 GHSA-vfqx-33qm-g869 |
Unsafe Deserialization in jackson-databind |
Affected by 4 other vulnerabilities. |
VCID-vaet-ekgb-aaak
Aliases: CVE-2020-35490 GHSA-wh8g-3j2c-rqj5 |
Serialization gadgets exploit in jackson-databind |
Affected by 4 other vulnerabilities. |
VCID-vpmx-ghg3-aaaj
Aliases: CVE-2020-36184 GHSA-m6x4-97wx-4q27 |
Unsafe Deserialization in jackson-databind |
Affected by 4 other vulnerabilities. |
VCID-wanu-687f-aaag
Aliases: CVE-2020-35491 GHSA-r3gr-cxrf-hg25 |
Serialization gadgets exploit in jackson-databind |
Affected by 4 other vulnerabilities. |
VCID-x5kz-bhzn-aaap
Aliases: CVE-2020-24750 GHSA-qjw2-hr98-qgfh |
Unsafe Deserialization in jackson-databind |
Affected by 20 other vulnerabilities. |
VCID-yvj4-rdyw-aaaa
Aliases: CVE-2020-36187 GHSA-r695-7vr9-jgc2 |
Unsafe Deserialization in jackson-databind |
Affected by 4 other vulnerabilities. |
Vulnerability | Summary | Aliases |
---|---|---|
VCID-1483-7zuj-aaan | Deserialization of untrusted data in Jackson Databind |
CVE-2020-14060
GHSA-j823-4qch-3rgm |
VCID-3d7x-hvq1-aaad | Deserialization of untrusted data in Jackson Databind |
CVE-2020-14195
GHSA-mc6h-4qgp-37qh |
VCID-94jd-rgvr-aaas | Deserialization of untrusted data in Jackson Databind |
CVE-2020-14062
GHSA-c265-37vj-cwcc |
VCID-wpbd-m9bh-aaak | Deserialization of untrusted data in Jackson Databind |
CVE-2020-14061
GHSA-c2q3-4qrh-fm48 |