High DLA-2990-1 1 CVE

jackson-databind - security update

Published May 2, 2022 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

Release	Package	Fixed in
Debian · 9	jackson-databind	2.8.6-1+deb9u10

Vulnerabilities 1

High 7.5

CVE-2020-36518 Public exploit

Deeply nested json in jackson-databind

jackson-databind before 2.13.0 allows a Java StackOverflow exception and denial of service via a large depth of nested objects.

management-api-for-apache-cassandra-5.0 com.fasterxml.jackson.core:jackson-databind jackson-databind jackson-databind Debian Ubuntu Wolfi Maven

Mar 11, 2022