| jackson-databind possible Denial of Service if using JDK serialization to serialize JsonNodeCVE-2021-46877 · GHSA-3X8X-79M2-3W2W |
com.fasterxml.jackson.core:jackson-databindCryostat 2/jackson-databind |
MavenRed Hat |
High
|
Fix reported |
|
| Uncontrolled Resource Consumption in FasterXML jackson-databindCVE-2022-42004 · GHSA-RGV9-Q543-RQG4 |
com.fasterxml.jackson.core:jackson-databindRed Hat Enterprise Linux 8/jackson-databind |
MavenRed Hat |
High
|
Fix reported |
|
| Deeply nested json in jackson-databindCVE-2020-36518 · GHSA-57J2-W4CX-62H2 |
com.fasterxml.jackson.core:jackson-databindRed Hat BPM Suite 6/jackson-databind |
MavenRed Hat |
High
|
Fix reported |
|
| Polymorphic Typing issue in FasterXML jackson-databindCVE-2019-14540 · GHSA-H822-R4R5-V8JG |
com.fasterxml.jackson.core:jackson-databindRed Hat BPM Suite 6/jackson-databind |
MavenRed Hat |
Critical
|
Fix reported |
|
| Polymorphic deserialization of malicious object in jackson-databindCVE-2019-14893 · GHSA-QMQC-X3R4-6V39 |
com.fasterxml.jackson.core:jackson-databindRed Hat BPM Suite 6/jackson-databind |
MavenRed Hat |
High
|
Fix reported |
|
| XML External Entity (XXE) Injection in Jackson DatabindCVE-2020-25649 · GHSA-288C-CQ4H-88GQ |
com.fasterxml.jackson.core:jackson-databindA-MQ Clients 2/jackson-databind |
MavenRed Hat |
High
|
Fix reported |
|
| jackson-databind mishandles the interaction between serialization gadgets and typingCVE-2020-10672 · GHSA-95CM-88F5-F2C7 |
com.fasterxml.jackson.core:jackson-databindRed Hat BPM Suite 6/jackson-databind |
MavenRed Hat |
High
|
Fix reported |
|
| Server-Side Request Forgery (SSRF) in jackson-databindCVE-2018-14721 · GHSA-9MXF-G3X6-WV74 |
com.fasterxml.jackson.core:jackson-databindRed Hat BPM Suite 6/jackson-databind |
MavenRed Hat |
Critical
|
Fix reported |
|
| jackson-databind mishandles the interaction between serialization gadgets and typingCVE-2020-11111 · GHSA-V3XW-C963-F5HC |
com.fasterxml.jackson.core:jackson-databindRed Hat BPM Suite 6/jackson-databind |
MavenRed Hat |
High
|
Fix reported |
|
| jackson-databind mishandles the interaction between serialization gadgets and typingCVE-2020-11620 · GHSA-H4RC-386G-6M85 |
com.fasterxml.jackson.core:jackson-databindRed Hat BPM Suite 6/jackson-databind |
MavenRed Hat |
High
|
Fix reported |
|
| jackson-databind mishandles the interaction between serialization gadgets and typingCVE-2020-11112 · GHSA-58PP-9C76-5625 |
com.fasterxml.jackson.core:jackson-databindRed Hat BPM Suite 6/jackson-databind |
MavenRed Hat |
High
|
Fix reported |
|
| Deserialization of Untrusted DataCVE-2018-12023 · GHSA-6WQP-V4V6-C87C |
com.fasterxml.jackson.core:jackson-databindRed Hat JBoss A-MQ 6/jackson-databind |
MavenRed Hat |
High
|
Fix reported |
|
| jackson-databind mishandles the interaction between serialization gadgets and typingCVE-2020-11113 · GHSA-9VVP-FXW6-JCXR |
com.fasterxml.jackson.core:jackson-databindRed Hat BPM Suite 6/jackson-databind |
MavenRed Hat |
High
|
Fix reported |
|
| Deserialization of Untrusted Data in jackson-databindCVE-2018-19361 · GHSA-MX9V-GMH4-MGQW |
com.fasterxml.jackson.core:jackson-databindRed Hat JBoss A-MQ 6/jackson-databind |
MavenRed Hat |
Critical
|
Fix reported |
|
| Deserialization of Untrusted Data in jackson-databind due to polymorphic deserializationCVE-2018-19360 · GHSA-F9HV-MG5H-XCW9 |
com.fasterxml.jackson.core:jackson-databindRed Hat JBoss A-MQ 6/jackson-databind |
MavenRed Hat |
Critical
|
Fix reported |
|
| XML External Entity Reference (XXE) in jackson-databindCVE-2018-14720 · GHSA-X2W5-5M2G-7H5M |
com.fasterxml.jackson.core:jackson-databindRed Hat BPM Suite 6/jackson-databind |
MavenRed Hat |
Critical
|
Fix reported |
|
| jackson-databind mishandles the interaction between serialization gadgets and typingCVE-2020-9546 · GHSA-5P34-5M6P-P58G |
com.fasterxml.jackson.core:jackson-databindRed Hat JBoss A-MQ 6/jackson-databind |
MavenRed Hat |
Critical
|
Fix reported |
|
| jackson-databind mishandles the interaction between serialization gadgets and typingCVE-2020-10968 · GHSA-RF6R-2C4Q-2VWG |
com.fasterxml.jackson.core:jackson-databindRed Hat Enterprise Linux 8/pki-deps:10.6/jackson-databind |
MavenRed Hat |
High
|
Fix reported |
|
| jackson-databind mishandles the interaction between serialization gadgets and typingCVE-2020-11619 · GHSA-27XJ-RQX5-2255 |
com.fasterxml.jackson.core:jackson-databindRed Hat BPM Suite 6/jackson-databind |
MavenRed Hat |
High
|
Fix reported |
|
| jackson-databind polymorphic typing issueCVE-2019-16943 · GHSA-FMMC-742Q-JG75 |
com.fasterxml.jackson.core:jackson-databindRed Hat BPM Suite 6/jackson-databind |
MavenRed Hat |
Critical
|
Fix reported |
|
