Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/tools.jackson.core/jackson-databind@2.19.0
purl pkg:maven/tools.jackson.core/jackson-databind@2.19.0
Tags Ghost
Next non-vulnerable version 3.1.7
Latest non-vulnerable version 3.2.3
Risk score 2.4
Vulnerabilities affecting this package (1)
Advisory Summary Fixed in package version
GHSA-hgj6-7826-r7m5
Aliases:
CVE-2026-54514
jackson-databind: InetSocketAddress deserialization triggers eager DNS resolution (SSRF) ## Summary `JDKFromStringDeserializer` constructed `InetSocketAddress` with `new InetSocketAddress(host, port)`, which performs eager … There are no reported fixed by versions.
This package is not known to fix any advisories.