Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.9.0
purl pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.9.0
Tags Ghost
Next non-vulnerable version 2.18.11
Latest non-vulnerable version 2.22.3
Risk score 4.4
Vulnerabilities affecting this package (1)
Advisory Summary Fixed in package version
GHSA-qxxx-2pp7-5hmx
Aliases:
CVE-2017-7525
jackson-databind is vulnerable to a deserialization flaw A deserialization flaw was discovered in the jackson-databind, versions before 2.6.7.1, 2.7.9.1 and …
2.7.9.1
Vulnerable
2.7.9.1
Vulnerable
This package is not known to fix any advisories.