Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.0
purl pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.0
Tags Ghost
Next non-vulnerable version 2.18.11
Latest non-vulnerable version 2.22.3
Risk score 4.4
Vulnerabilities affecting this package (1)
Advisory Summary Fixed in package version
GHSA-cggj-fvv3-cqwv
Aliases:
CVE-2018-7489
FasterXML jackson-databind allows unauthenticated remote code execution FasterXML jackson-databind before before 2.6.7.5, 2.7.x before 2.7.9.3, 2.8.x before 2.8.11.1, and 2.9.x …
2.8.11.1
Vulnerable
2.8.11.1
Vulnerable
2.8.11.1
Vulnerable
This package is not known to fix any advisories.