Skip to content
Security
فارسی
Sign in / Register
Vulnerabilities
Products
Plugins
All products
Red Hat JBoss Data Grid 7/jackson-databind
Red Hat
· Package
18 reports
Vulnerability alerts
Follow
Package, identifier or title
Search
Severity
All
Critical
High
Medium
Low
Unknown
Fix status
All
Fix reported
No fix reported
Sort by
Recently updated
Highest severity
Report
Product
Ecosystem
Severity
Fix status
Last updated
jackson-databind possible Denial of Service if using JDK serialization to serialize JsonNode
CVE-2021-46877 · GHSA-3X8X-79M2-3W2W
com.fasterxml.jackson.core:jackson-databind
Cryostat 2/jackson-databind
Maven
Red Hat
High
Fix reported
2026-09-10
Uncontrolled Resource Consumption in Jackson-databind
CVE-2022-42003 · GHSA-JJJH-JJXP-WPFF
com.fasterxml.jackson.core:jackson-databind
Red Hat Enterprise Linux 8/jackson-databind
Maven
Red Hat
High
Fix reported
2026-09-10
Uncontrolled Resource Consumption in FasterXML jackson-databind
CVE-2022-42004 · GHSA-RGV9-Q543-RQG4
com.fasterxml.jackson.core:jackson-databind
Red Hat Enterprise Linux 8/jackson-databind
Maven
Red Hat
High
Fix reported
2026-09-10
Deserialization of untrusted data in Jackson Databind
CVE-2020-14195 · GHSA-MC6H-4QGP-37QH
com.fasterxml.jackson.core:jackson-databind
Red Hat BPM Suite 6/jackson-databind
Maven
Red Hat
High
Fix reported
2026-08-07
Deserialization of untrusted data in Jackson Databind
CVE-2020-14062 · GHSA-C265-37VJ-CWCC
com.fasterxml.jackson.core:jackson-databind
Red Hat BPM Suite 6/jackson-databind
Maven
Red Hat
High
Fix reported
2026-08-07
jackson-databind mishandles the interaction between serialization gadgets and typing
CVE-2020-11111 · GHSA-V3XW-C963-F5HC
com.fasterxml.jackson.core:jackson-databind
Red Hat BPM Suite 6/jackson-databind
Maven
Red Hat
High
Fix reported
2026-08-07
jackson-databind mishandles the interaction between serialization gadgets and typing
CVE-2020-11620 · GHSA-H4RC-386G-6M85
com.fasterxml.jackson.core:jackson-databind
Red Hat BPM Suite 6/jackson-databind
Maven
Red Hat
High
Fix reported
2026-08-07
jackson-databind mishandles the interaction between serialization gadgets and typing
CVE-2020-11112 · GHSA-58PP-9C76-5625
com.fasterxml.jackson.core:jackson-databind
Red Hat BPM Suite 6/jackson-databind
Maven
Red Hat
High
Fix reported
2026-08-07
Deserialization of untrusted data in Jackson Databind
CVE-2020-14060 · GHSA-J823-4QCH-3RGM
com.fasterxml.jackson.core:jackson-databind
Red Hat BPM Suite 6/jackson-databind
Maven
Red Hat
High
Fix reported
2026-08-07
jackson-databind mishandles the interaction between serialization gadgets and typing
CVE-2020-11113 · GHSA-9VVP-FXW6-JCXR
com.fasterxml.jackson.core:jackson-databind
Red Hat BPM Suite 6/jackson-databind
Maven
Red Hat
High
Fix reported
2026-08-07
Deserialization of untrusted data in Jackson Databind
CVE-2020-14061 · GHSA-C2Q3-4QRH-FM48
com.fasterxml.jackson.core:jackson-databind
Red Hat BPM Suite 6/jackson-databind
Maven
Red Hat
High
Fix reported
2026-08-07
jackson-databind mishandles the interaction between serialization gadgets and typing
CVE-2020-11619 · GHSA-27XJ-RQX5-2255
com.fasterxml.jackson.core:jackson-databind
Red Hat BPM Suite 6/jackson-databind
Maven
Red Hat
High
Fix reported
2026-08-07
Serialization gadgets exploit in jackson-databind
CVE-2020-35491 · GHSA-R3GR-CXRF-HG25
com.fasterxml.jackson.core:jackson-databind
Red Hat BPM Suite 6/jackson-databind
Maven
Red Hat
High
Fix reported
2024-06-25
Serialization gadgets exploit in jackson-databind
CVE-2020-35490 · GHSA-WH8G-3J2C-RQJ5
com.fasterxml.jackson.core:jackson-databind
Red Hat BPM Suite 6/jackson-databind
Maven
Red Hat
High
Fix reported
2024-03-15
jackson-databind is vulnerable to a deserialization flaw
CVE-2017-7525 · GHSA-QXXX-2PP7-5HMX
com.fasterxml.jackson.core:jackson-databind
Red Hat Enterprise Virtualization 3/jasperreports-server-pro
Maven
Red Hat
Critical
Fix reported
2024-03-11
Code Injection in jackson-databind
CVE-2020-24616 · GHSA-H3CW-G4MQ-C5X2
com.fasterxml.jackson.core:jackson-databind
Red Hat BPM Suite 6/jackson-databind
Maven
Red Hat
High
Fix reported
2024-02-18
Unsafe Deserialization in jackson-databind
CVE-2020-24750 · GHSA-QJW2-HR98-QGFH
com.fasterxml.jackson.core:jackson-databind
Red Hat BPM Suite 6/jackson-databind
Maven
Red Hat
High
Fix reported
2024-02-18
jackson-databind: denial of service via cylic dependencies
CVE-2023-35116
Cryostat 2/jackson-databind
Red Hat Decision Manager 7/jackson-databind
Red Hat
Medium
No fix reported
Not recorded