Security
English
همهٔ محصولات

Red Hat Ansible Automation Platform 2/python3.11-drools-jpy-jar

Red Hat · بسته
13 گزارش
اطلاع‌رسانی آسیب‌پذیری
دنبال‌کردن
گزارشمحصولاکوسیستمشدتوضعیت اصلاحآخرین تغییر
jackson-databind: InetSocketAddress deserialization triggers eager DNS resolution (SSRF)CVE-2026-54514 · GHSA-HGJ6-7826-R7M5 com.fasterxml.jackson.core:jackson-databindtools.jackson.core:jackson-databind MavenRed Hat متوسط اصلاح گزارش شده
jackson-databind: @JsonView bypassed for @JsonUnwrapped container properties on deserializationCVE-2026-59889 · GHSA-5GVW-P9QM-JGWH com.fasterxml.jackson.core:jackson-databindtools.jackson.core:jackson-databind MavenRed Hat متوسط اصلاح گزارش شده
jackson-databind: Comparable missing from DefaultBaseTypeLimitingValidator's unsafe base types (incomplete PolymorphicTypeValidator denylist)CVE-2026-83557 · GHSA-GX83-3VF8-GH7J com.fasterxml.jackson.core:jackson-databindtools.jackson.core:jackson-databind MavenRed Hat متوسط اصلاح گزارش شده
jackson-databind: Path Deserialization Missing Scheme Allowlist for FileSystemProvider ResolutionCVE-2026-19032 · GHSA-WJGM-6HV5-3CVF com.fasterxml.jackson.core:jackson-databindtools.jackson.core:jackson-databind MavenRed Hat متوسط اصلاح گزارش شده
jackson-databind: Incomplete fix for CVE-2026-54514: eager DNS resolution (SSRF) still present in InetAddress deserializationCVE-2026-77310 · GHSA-VVGP-RFG2-7RR6 com.fasterxml.jackson.core:jackson-databindtools.jackson.core:jackson-databind MavenRed Hat متوسط اصلاح گزارش شده
jackson-databind: @JsonIgnore on a Record property is bypassed with a PropertyNamingStrategyCVE-2026-59888 · GHSA-3PJW-73GF-8QR5 com.fasterxml.jackson.core:jackson-databindtools.jackson.core:jackson-databind MavenRed Hat متوسط اصلاح گزارش شده
jackson-databind has case-insensitive deserialization bypasses per-property @JsonIgnorePropertiesCVE-2026-54515 · GHSA-5JMJ-H7XM-6Q6V com.fasterxml.jackson.core:jackson-databindtools.jackson.core:jackson-databind MavenRed Hat متوسط اصلاح گزارش شده
jackson-databind has @JsonView bypass for setterless creator propertiesCVE-2026-54517 · GHSA-5HH8-Q8HV-FR38 com.fasterxml.jackson.core:jackson-databindtools.jackson.core:jackson-databind MavenRed Hat متوسط اصلاح گزارش شده
jackson-databind has a @JsonView bypass for unwrapped creator parametersCVE-2026-54518 · GHSA-RCQC-6CW3-H962 com.fasterxml.jackson.core:jackson-databindtools.jackson.core:jackson-databind MavenRed Hat متوسط اصلاح گزارش شده
jackson-databind's renamed @JsonIgnore'd setters can deserialize via private fieldsCVE-2026-54516 · GHSA-9FXM-VC8V-HJ55 com.fasterxml.jackson.core:jackson-databindtools.jackson.core:jackson-databind MavenRed Hat متوسط اصلاح گزارش شده
jackson-core: Number Length Constraint Bypass in Async Parser Leads to Potential DoS ConditionCVE-2026-18401 · GHSA-72HV-8253-57QQ com.fasterxml.jackson.core:jackson-coretools.jackson.core:jackson-core MavenRed Hat متوسط اصلاح گزارش شده
Apache Commons Lang is vulnerable to Uncontrolled Recursion when processing long inputsCVE-2025-48924 · GHSA-J288-Q9X7-2F5V commons-lang:commons-langorg.apache.commons:commons-lang3 MavenRed Hat متوسط اصلاح گزارش شده
Jackson-core Vulnerable to Memory Disclosure via Source Snippet in JsonLocationCVE-2025-49128 · GHSA-WF8F-6423-GFXG com.fasterxml.jackson.core:jackson-coreCryostat 4/jackson-core MavenRed Hat متوسط اصلاح گزارش شده