VulnerableCode Package Details - pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-xml@2.5.4

Search for packages

Vulnerability	Summary	Fixed by
VCID-1nej-81n4-aaab Aliases: CVE-2016-3720 GHSA-hmq6-frv3-4727	High severity vulnerability that affects com.fasterxml.jackson.dataformat:jackson-dataformat-xml	2.7.4 Affected by 2 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} 2.8.0 Affected by 2 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }}
VCID-7rbq-92cj-aaar Aliases: CVE-2020-24616 GHSA-h3cw-g4mq-c5x2	Code Injection in jackson-databind	2.10.0 Affected by 0 other vulnerabilities.
VCID-s2hq-5z79-aaab Aliases: CVE-2016-7051 GHSA-7c2r-3jqf-c9rw	Moderate severity vulnerability that affects com.fasterxml.jackson.dataformat:jackson-dataformat-xml	2.7.8 Affected by 1 other vulnerability. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} 2.8.4 Affected by 1 other vulnerability. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }}

Vulnerability

Summary

Fixed by

VCID-1nej-81n4-aaab
Aliases:
CVE-2016-3720
GHSA-hmq6-frv3-4727

High severity vulnerability that affects com.fasterxml.jackson.dataformat:jackson-dataformat-xml

2.7.4
Affected by 2 other vulnerabilities.

2.8.0
Affected by 2 other vulnerabilities.

VCID-7rbq-92cj-aaar
Aliases:
CVE-2020-24616
GHSA-h3cw-g4mq-c5x2

Code Injection in jackson-databind

2.10.0
Affected by 0 other vulnerabilities.

VCID-s2hq-5z79-aaab
Aliases:
CVE-2016-7051
GHSA-7c2r-3jqf-c9rw

Moderate severity vulnerability that affects com.fasterxml.jackson.dataformat:jackson-dataformat-xml

2.7.8
Affected by 1 other vulnerability.

2.8.4
Affected by 1 other vulnerability.

Vulnerability	Summary	Aliases
This package is not known to fix vulnerabilities.

Vulnerability

Summary

Aliases

This package is not known to fix vulnerabilities.

Date	Actor	Action	Vulnerability	Source	VulnerableCode Version
2025-06-20T14:42:06.676387+00:00	GitLab Importer	Affected by	VCID-7rbq-92cj-aaar	None	36.1.3
2025-06-20T14:42:05.111469+00:00	GitLab Importer	Affected by	VCID-7rbq-92cj-aaar	https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/com.fasterxml.jackson.dataformat/jackson-dataformat-xml/CVE-2020-24616.yml	36.1.3
2025-06-20T14:17:53.764671+00:00	GitLab Importer	Affected by	VCID-s2hq-5z79-aaab	https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/com.fasterxml.jackson.dataformat/jackson-dataformat-xml/CVE-2016-7051.yml	36.1.3
2025-06-20T14:17:43.359848+00:00	GitLab Importer	Affected by	VCID-s2hq-5z79-aaab	None	36.1.3
2025-06-20T13:50:51.943164+00:00	GitLab Importer	Affected by	VCID-1nej-81n4-aaab	https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/com.fasterxml.jackson.dataformat/jackson-dataformat-xml/CVE-2016-3720.yml	36.1.3
2025-06-20T13:50:51.797645+00:00	GitLab Importer	Affected by	VCID-1nej-81n4-aaab	None	36.1.3
2025-06-14T21:06:12.769855+00:00	GitLab Importer	Affected by	VCID-7rbq-92cj-aaar	None	36.1.0
2025-06-14T21:06:11.372199+00:00	GitLab Importer	Affected by	VCID-7rbq-92cj-aaar	https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/com.fasterxml.jackson.dataformat/jackson-dataformat-xml/CVE-2020-24616.yml	36.1.0
2025-06-14T20:44:15.422998+00:00	GitLab Importer	Affected by	VCID-s2hq-5z79-aaab	https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/com.fasterxml.jackson.dataformat/jackson-dataformat-xml/CVE-2016-7051.yml	36.1.0
2025-06-14T20:44:05.010714+00:00	GitLab Importer	Affected by	VCID-s2hq-5z79-aaab	None	36.1.0
2025-06-14T20:22:28.076840+00:00	GitLab Importer	Affected by	VCID-1nej-81n4-aaab	https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/com.fasterxml.jackson.dataformat/jackson-dataformat-xml/CVE-2016-3720.yml	36.1.0
2025-06-14T20:22:27.941486+00:00	GitLab Importer	Affected by	VCID-1nej-81n4-aaab	None	36.1.0