Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/tools.jackson.core/jackson-databind@2.21.4
purl pkg:maven/tools.jackson.core/jackson-databind@2.21.4
Tags Ghost
This package is not known to be subject of any advisories.
Vulnerabilities fixed by this package (1)

Advisory Summary Aliases
GHSA-hgj6-7826-r7m5
jackson-databind: InetSocketAddress deserialization triggers eager DNS resolution (SSRF) ## Summary `JDKFromStringDeserializer` constructed `InetSocketAddress` with `new InetSocketAddress(host, port)`, which performs eager … CVE-2026-54514