Search for packages
| purl | pkg:maven/com.fasterxml.jackson/jackson-databind@2.9.10.7 |
| Tags | Ghost |
| Next non-vulnerable version | None. |
| Latest non-vulnerable version | None. |
| Risk | 4.0 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-b6wb-a6hz-aaan
Aliases: CVE-2020-35728 GHSA-5r5r-6hpj-8gg9 |
Serialization gadget exploit in jackson-databind |
Affected by 0 other vulnerabilities. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| This package is not known to fix vulnerabilities. | ||
| Date | Actor | Action | Vulnerability | Source | VulnerableCode Version |
|---|---|---|---|---|---|
| 2025-03-28T20:05:07.897609+00:00 | GHSA Importer | Affected by | VCID-b6wb-a6hz-aaan | None | 36.0.0 |
| 2024-09-17T22:37:06.219997+00:00 | GitLab Importer | Affected by | VCID-b6wb-a6hz-aaan | https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/com.fasterxml.jackson/jackson-databind/CVE-2020-35728.yml | 34.0.1 |
| 2024-01-03T18:00:07.114961+00:00 | GitLab Importer | Affected by | VCID-b6wb-a6hz-aaan | https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/com.fasterxml.jackson/jackson-databind/CVE-2020-35728.yml | 34.0.0rc1 |