Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.0.0
purl pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.0.0
Tags Ghost
Next non-vulnerable version 2.18.11
Latest non-vulnerable version 2.22.3
Risk score 3.4
Vulnerabilities affecting this package (1)
Advisory Summary Fixed in package version
GHSA-288c-cq4h-88gq
Aliases:
CVE-2020-25649
XML External Entity (XXE) Injection in Jackson Databind A flaw was found in FasterXML Jackson Databind, where it did not …
2.9.10.7
Vulnerable
This package is not known to fix any advisories.