Skip to content
OpenAdvisories

Package · Maven

org.codehaus.jackson:jackson-mapper-asl

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • Medium 5.9
    CVE-2019-10172 Public exploit EPSS 17%

    Improper Restriction of XML External Entity Reference in jackson-mapper-asl

    A flaw was found in org.codehaus.jackson:jackson-mapper-asl:1.9.x libraries. XML external entity vulnerabilities similar CVE-2016-3720 also affects codehaus jackson-mapper-asl libraries but in different classes.

    Red Hat jackson-mapper-asl tez spark-4.0-scala-2.13 Debian Ubuntu Wolfi Maven
  • High 8.1
    CVE-2019-10202

    Deserialization of Untrusted Data in org.codehaus.jackson:jackson-mapper-asl

    A series of deserialization vulnerabilities have been discovered in Codehaus 1.9.x implemented in EAP 7. This CVE fixes CVE-2017-17485, CVE-2017-7525, CVE-2017-15095, CVE-2018-5968, CVE-2018-7489, CVE-2018-1000873, CVE-2019-12086 reported for FasterXML jackso…

    Red Hat codehaus tez spark-4.0-scala-2.13 Wolfi Maven