High DLA-1798-1 1 CVE

jackson-databind - security update

Published May 21, 2019 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

Release	Package	Fixed in
Debian · 8	jackson-databind	2.4.2-2+deb8u6

Vulnerabilities 1

High 7.5

CVE-2019-12086 Public exploit EPSS 22%

Information exposure in FasterXML jackson-databind

A Polymorphic Typing issue was discovered in FasterXML jackson-databind 2.x before 2.9.9. When Default Typing is enabled (either globally or for a specific property) for an externally exposed JSON endpoint, the service has the mysql-connector-java jar (8.0.14…

com.fasterxml.jackson.core:jackson-databind jackson-databind jackson-databind Debian Ubuntu Maven

May 17, 2019