Vendor
FasterXML
34 known vulnerabilities.
Products
jackson-databind 18
jackson-core 8
jackson-dataformat-protobuf 2
jackson-dataformats-binary 2
jackson-dataformats-text 1
jackson-dataformat-smile 1
com.fasterxml.jackson.core:jackson-databind 1
tools.jackson.core:jackson-databind 1
jackson-dataformat-cbor 1
Jackson < 2.15.2 0
Jackson 0
Jackson < jackson databind 2.13.1 0
Jackson < jackson databind 2.12.6 0
1 result · Clear filters · Feed
-
Critical 9.8
jackson-databind is vulnerable to a deserialization flaw
A deserialization flaw was discovered in the jackson-databind, versions before 2.6.7.1, 2.7.9.1 and 2.8.9, which could allow an unauthenticated user to perform code execution by sending the maliciously crafted input to the readValue method of the ObjectMapper.