Vendor
FasterXML
34 known vulnerabilities.
Products
jackson-databind 18
jackson-core 8
jackson-dataformat-protobuf 2
jackson-dataformats-binary 2
jackson-dataformats-text 1
jackson-dataformat-smile 1
com.fasterxml.jackson.core:jackson-databind 1
tools.jackson.core:jackson-databind 1
jackson-dataformat-cbor 1
Jackson < 2.15.2 0
Jackson 0
Jackson < jackson databind 2.13.1 0
Jackson < jackson databind 2.12.6 0
1 result · Clear filters · Feed
-
Medium 5.3CVE-2026-54515 Public exploit
jackson-databind: Case-insensitive deserialization bypasses per-property @JsonIgnoreProperties
jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor. From 2.8.0 until 2.18.9, 2.21.5, and 3.1.4, in BeanDeserializerBase.createContextual(), per-property @JsonIgnoreProperties exclusions are appli…