| jackson-databind: InetSocketAddress deserialization triggers eager DNS resolution (SSRF)CVE-2026-54514 · GHSA-HGJ6-7826-R7M5 |
com.fasterxml.jackson.core:jackson-databindtools.jackson.core:jackson-databind |
MavenRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| jackson-databind has a PolymorphicTypeValidator bypass via generic type parameters that allows arbitrary class instantiationCVE-2026-54512 · GHSA-J3RV-43J4-C7QM |
com.fasterxml.jackson.core:jackson-databindtools.jackson.core:jackson-databind |
MavenRed Hat |
زیاد
|
اصلاح گزارش شده |
|
| jackson-databind: Comparable missing from DefaultBaseTypeLimitingValidator's unsafe base types (incomplete PolymorphicTypeValidator denylist)CVE-2026-83557 · GHSA-GX83-3VF8-GH7J |
com.fasterxml.jackson.core:jackson-databindtools.jackson.core:jackson-databind |
MavenRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| jackson-databind has case-insensitive deserialization bypasses per-property @JsonIgnorePropertiesCVE-2026-54515 · GHSA-5JMJ-H7XM-6Q6V |
com.fasterxml.jackson.core:jackson-databindtools.jackson.core:jackson-databind |
MavenRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| Jackson-core Vulnerable to Memory Disclosure via Source Snippet in JsonLocationCVE-2025-49128 · GHSA-WF8F-6423-GFXG |
com.fasterxml.jackson.core:jackson-coreCryostat 4/jackson-core |
MavenRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| jackson-databind possible Denial of Service if using JDK serialization to serialize JsonNodeCVE-2021-46877 · GHSA-3X8X-79M2-3W2W |
com.fasterxml.jackson.core:jackson-databindCryostat 2/jackson-databind |
MavenRed Hat |
زیاد
|
اصلاح گزارش شده |
|
| Uncontrolled Resource Consumption in Jackson-databindCVE-2022-42003 · GHSA-JJJH-JJXP-WPFF |
com.fasterxml.jackson.core:jackson-databindRed Hat Enterprise Linux 8/jackson-databind |
MavenRed Hat |
زیاد
|
اصلاح گزارش شده |
|
| Uncontrolled Resource Consumption in FasterXML jackson-databindCVE-2022-42004 · GHSA-RGV9-Q543-RQG4 |
com.fasterxml.jackson.core:jackson-databindRed Hat Enterprise Linux 8/jackson-databind |
MavenRed Hat |
زیاد
|
اصلاح گزارش شده |
|
| XML External Entity (XXE) Injection in Jackson DatabindCVE-2020-25649 · GHSA-288C-CQ4H-88GQ |
com.fasterxml.jackson.core:jackson-databindA-MQ Clients 2/jackson-databind |
MavenRed Hat |
زیاد
|
اصلاح گزارش شده |
|
| Deserialization of untrusted data in Jackson DatabindCVE-2020-14195 · GHSA-MC6H-4QGP-37QH |
com.fasterxml.jackson.core:jackson-databindRed Hat BPM Suite 6/jackson-databind |
MavenRed Hat |
زیاد
|
اصلاح گزارش شده |
|
| Deserialization of untrusted data in Jackson DatabindCVE-2020-14062 · GHSA-C265-37VJ-CWCC |
com.fasterxml.jackson.core:jackson-databindRed Hat BPM Suite 6/jackson-databind |
MavenRed Hat |
زیاد
|
اصلاح گزارش شده |
|
| jackson-databind mishandles the interaction between serialization gadgets and typingCVE-2020-11111 · GHSA-V3XW-C963-F5HC |
com.fasterxml.jackson.core:jackson-databindRed Hat BPM Suite 6/jackson-databind |
MavenRed Hat |
زیاد
|
اصلاح گزارش شده |
|
| jackson-databind mishandles the interaction between serialization gadgets and typingCVE-2020-11620 · GHSA-H4RC-386G-6M85 |
com.fasterxml.jackson.core:jackson-databindRed Hat BPM Suite 6/jackson-databind |
MavenRed Hat |
زیاد
|
اصلاح گزارش شده |
|
| jackson-databind mishandles the interaction between serialization gadgets and typingCVE-2020-11112 · GHSA-58PP-9C76-5625 |
com.fasterxml.jackson.core:jackson-databindRed Hat BPM Suite 6/jackson-databind |
MavenRed Hat |
زیاد
|
اصلاح گزارش شده |
|
| Deserialization of untrusted data in Jackson DatabindCVE-2020-14060 · GHSA-J823-4QCH-3RGM |
com.fasterxml.jackson.core:jackson-databindRed Hat BPM Suite 6/jackson-databind |
MavenRed Hat |
زیاد
|
اصلاح گزارش شده |
|
| jackson-databind mishandles the interaction between serialization gadgets and typingCVE-2020-11113 · GHSA-9VVP-FXW6-JCXR |
com.fasterxml.jackson.core:jackson-databindRed Hat BPM Suite 6/jackson-databind |
MavenRed Hat |
زیاد
|
اصلاح گزارش شده |
|
| Deserialization of untrusted data in Jackson DatabindCVE-2020-14061 · GHSA-C2Q3-4QRH-FM48 |
com.fasterxml.jackson.core:jackson-databindRed Hat BPM Suite 6/jackson-databind |
MavenRed Hat |
زیاد
|
اصلاح گزارش شده |
|
| jackson-databind mishandles the interaction between serialization gadgets and typingCVE-2020-10968 · GHSA-RF6R-2C4Q-2VWG |
com.fasterxml.jackson.core:jackson-databindRed Hat Enterprise Linux 8/pki-deps:10.6/jackson-databind |
MavenRed Hat |
زیاد
|
اصلاح گزارش شده |
|
| jackson-databind mishandles the interaction between serialization gadgets and typingCVE-2020-11619 · GHSA-27XJ-RQX5-2255 |
com.fasterxml.jackson.core:jackson-databindRed Hat BPM Suite 6/jackson-databind |
MavenRed Hat |
زیاد
|
اصلاح گزارش شده |
|
| jackson-databind mishandles the interaction between serialization gadgets and typingCVE-2020-10969 · GHSA-758M-V56V-GRJ4 |
com.fasterxml.jackson.core:jackson-databindRed Hat Enterprise Linux 8/pki-deps:10.6/jackson-databind |
MavenRed Hat |
زیاد
|
اصلاح گزارش شده |
|
