Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.00
purl pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.00
Tags Ghost
Next non-vulnerable version 2.18.11
Latest non-vulnerable version 2.22.3
Risk score 3.6
Vulnerabilities affecting this package (1)
Advisory Summary Fixed in package version
GHSA-9m6f-7xcq-8vf8
Aliases:
CVE-2020-36183
Unsafe Deserialization in jackson-databind FasterXML jackson-databind 2.x before 2.9.10.8 and 2.6.7.5 mishandles the interaction between serialization gadgets and typing, related …
2.9.10.8
Vulnerable
This package is not known to fix any advisories.