Vendor
FasterXML
34 known vulnerabilities.
Products
jackson-databind 18
jackson-core 8
jackson-dataformat-protobuf 2
jackson-dataformats-binary 2
jackson-dataformats-text 1
jackson-dataformat-smile 1
com.fasterxml.jackson.core:jackson-databind 1
tools.jackson.core:jackson-databind 1
jackson-dataformat-cbor 1
Jackson < 2.15.2 0
Jackson 0
Jackson < jackson databind 2.13.1 0
Jackson < jackson databind 2.12.6 0
2 results · Clear filters · Feed
-
High 8.1CVE-2026-54512 Public exploit
jackson-databind: PolymorphicTypeValidator bypass via generic type parameters allows arbitrary class instantiation
jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor. From 2.10.0 until 2.18.8, 2.21.4, and 3.1.4, jackson-databind's PolymorphicTypeValidator (PTV) is the primary safety mechanism guarding polymor…
-
High 8.7CVE-2025-52999 Public exploit
jackson-core Has Potential for StackoverflowError if user parses an input file that contains very deeply nested data
jackson-core contains core low-level incremental ("streaming") parser and generator abstractions used by Jackson Data Processor. In versions prior to 2.15.0, if a user parses an input file and it has deeply nested data, Jackson could end up throwing a Stackov…