Skip to content
OpenAdvisories
High · 8.7 Public exploit CVE-2025-52999 EUVD-2025-28482GHSA-h46c-h94j-95f3

jackson-core Has Potential for StackoverflowError if user parses an input file that contains very deeply nested data

Published Jun 25, 2025 · Updated Jun 25, 2025 · Assigned by GitHub_M

Vendor: FasterXML Product: jackson-core Package: cassandra-4.1 Package: cassandra-4.1-compat Package: cassandra-reaper Package: celeborn-0.6 Package: com.fasterxml.jackson.core:jackson-core Package: confluent-common-docker Package: confluent-common-docker-base Package: cqlsh-5.0 Package: druid Package: gradle-stage0 Package: jackson-core Package: jackson-core Package: scala-3.8 Package: spark-4.0-scala-2.13 Package: spark-4.1 Package: spark-4.1-scala-2.13 Package: tez Ecosystem: Debian Ecosystem: Maven Ecosystem: Ubuntu Ecosystem: Wolfi

Description

jackson-core contains core low-level incremental ("streaming") parser and generator abstractions used by Jackson Data Processor. In versions prior to 2.15.0, if a user parses an input file and it has deeply nested data, Jackson could end up throwing a StackoverflowError if the depth is particularly large. jackson-core 2.15.0 contains a configurable limit for how deep Jackson will traverse in an input document, defaulting to an allowable depth of 1000. jackson-core will throw a StreamConstraintsException if the limit is reached. jackson-databind also benefits from this change because it uses jackson-core to parse JSON inputs. As a workaround, users should avoid parsing input files from untrusted sources.

Affected products

VendorProductAffectedFixed
FasterXML jackson-core < 2.15.0 —

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Debian

Security tracker ↗
ReleasePackageFixed inAdvisory
Debian 14 jackson-core 2.14.1-2 —
Debian 13 jackson-core 2.14.1-2~deb13u1 —
Debian 12 jackson-core 2.14.1-2~deb12u1 —

Ubuntu

Security tracker ↗
ReleasePackageFixed inAdvisory
Ubuntu 26.10 jackson-core No fix yet —
Ubuntu 26.04 LTS jackson-core No fix yet —
Ubuntu 25.10 jackson-core No fix yet —
Ubuntu 24.04 LTS jackson-core No fix yet —
Ubuntu 22.04 LTS jackson-core No fix yet —
Show 3 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
Ubuntu 20.04 LTS jackson-core No fix yet —
Ubuntu 18.04 LTS jackson-core No fix yet —
Ubuntu 16.04 LTS jackson-core No fix yet —

Red Hat

Security tracker ↗
ReleasePackageFixed inAdvisory
RHEL 9 jackson-core +10 2.19.1-1.el9_6 RHSA-2025:12280
RHEL 8 apache-commons-collections 3.2.2-10.module+el8.10.0+20993+d0f024b0 RHSA-2025:14126
RHEL 8 apache-commons-lang 2.6-21.module+el8.10.0+20993+d0f024b0 RHSA-2025:14126
RHEL 8 apache-commons-net 3.6-3.module+el8.10.0+20993+d0f024b0 RHSA-2025:14126
RHEL 8 bea-stax +1 1.2.0-16.module+el8.10.0+20993+d0f024b0 RHSA-2025:14126
RHEL 8 fasterxml-oss-parent 69-1.module+el8.10.0+23380+f6e7434b RHSA-2025:14126
RHEL 8 glassfish-fastinfoset 1.2.13-9.module+el8.10.0+20993+d0f024b0 RHSA-2025:14126
RHEL 8 glassfish-jaxb +3 2.2.11-12.module+el8.10.0+20993+d0f024b0 RHSA-2025:14126
RHEL 8 glassfish-jaxb-api 2.2.12-8.module+el8.10.0+21035+a01f6469 RHSA-2025:14126
RHEL 8 jackson-bom +8 2.19.1-1.module+el8.10.0+23380+f6e7434b RHSA-2025:14126
RHEL 8 jakarta-commons-httpclient 1:3.1-28.module+el8.10.0+20993+d0f024b0 RHSA-2025:14126
RHEL 8 javassist +1 3.18.1-8.module+el8.10.0+20993+d0f024b0 RHSA-2025:14126
RHEL 8 pki-servlet-engine 1:9.0.62-1.module+el8.10.0+21257+2b5308b5 RHSA-2025:14126
RHEL 8 relaxngDatatype 2011.1-7.module+el8.10.0+20993+d0f024b0 RHSA-2025:14126
RHEL 8 slf4j +1 1.7.25-4.module+el8.10.0+20993+d0f024b0 RHSA-2025:14126
RHEL 8 stax-ex 1.7.7-8.module+el8.10.0+20993+d0f024b0 RHSA-2025:14126
RHEL 8 velocity 1.7-24.module+el8.10.0+20993+d0f024b0 RHSA-2025:14126
RHEL 8 xalan-j2 2.7.1-38.module+el8.10.0+20993+d0f024b0 RHSA-2025:14126
RHEL 8 xerces-j2 2.11.0-34.module+el8.10.0+20993+d0f024b0 RHSA-2025:14126
RHEL 8 xml-commons-apis 1.4.01-25.module+el8.10.0+20993+d0f024b0 RHSA-2025:14126
RHEL 8 xml-commons-resolver 1.2-26.module+el8.10.0+20993+d0f024b0 RHSA-2025:14126
RHEL 8 xmlstreambuffer 1.5.4-8.module+el8.10.0+20993+d0f024b0 RHSA-2025:14126
RHEL 8 xsom 0-19.20110809svn.module+el8.10.0+20993+d0f024b0 RHSA-2025:14126
Show 15 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
RHEL 9.4 EUS jackson-core +10 2.19.1-1.el9_4 RHSA-2025:12281
RHEL 9.2 E4S jackson-core +10 2.19.1-1.el9_2 RHSA-2025:12282
RHEL 9.0 E4S jackson-core +10 2.19.1-1.el9_0 RHSA-2025:12283
RHEL 8.8 TUS apache-commons-collections 3.2.2-10.module+el8.1.0+3366+6dfb954c RHSA-2025:14117
RHEL 8.8 TUS apache-commons-lang 2.6-21.module+el8.1.0+3366+6dfb954c RHSA-2025:14117
RHEL 8.8 TUS apache-commons-net 3.6-3.module+el8.3.0+6805+72837426 RHSA-2025:14117
RHEL 8.8 TUS bea-stax +1 1.2.0-16.module+el8.1.0+3366+6dfb954c RHSA-2025:14117
RHEL 8.8 TUS fasterxml-oss-parent 69-3.module+el8.8.0+23396+b3893f62 RHSA-2025:14117
RHEL 8.8 TUS glassfish-fastinfoset 1.2.13-9.module+el8.1.0+3366+6dfb954c RHSA-2025:14117
RHEL 8.8 TUS glassfish-jaxb +3 2.2.11-11.module+el8.1.0+3366+6dfb954c RHSA-2025:14117
RHEL 8.8 TUS glassfish-jaxb-api 2.2.12-8.module+el8.1.0+3366+6dfb954c RHSA-2025:14117
RHEL 8.8 TUS jackson-annotations 2.19.1-3.module+el8.8.0+23396+b3893f62 RHSA-2025:14117
RHEL 8.8 TUS jackson-bom 2.19.1-4.module+el8.8.0+23413+86800787 RHSA-2025:14117
RHEL 8.8 TUS jackson-core 2.19.1-4.module+el8.8.0+23396+b3893f62 RHSA-2025:14117
RHEL 8.8 TUS jackson-databind 2.19.1-1.module+el8.8.0+23396+b3893f62 RHSA-2025:14117
RHEL 8.8 TUS jackson-jaxrs-providers +1 2.19.1-2.module+el8.8.0+23396+b3893f62 RHSA-2025:14117
RHEL 8.8 TUS jackson-modules-base +1 2.19.1-1.module+el8.8.0+23405+763e93bf RHSA-2025:14117
RHEL 8.8 TUS jackson-parent 2.19.2-3.module+el8.8.0+23413+86800787 RHSA-2025:14117
RHEL 8.8 TUS jakarta-commons-httpclient 1:3.1-28.module+el8.1.0+3366+6dfb954c RHSA-2025:14117
RHEL 8.8 TUS javassist +1 3.18.1-8.module+el8.1.0+3366+6dfb954c RHSA-2025:14117
RHEL 8.8 TUS pki-servlet-engine 1:9.0.62-1.module+el8.8.0+22367+4894538d RHSA-2025:14117
RHEL 8.8 TUS python-nss +2 1.0.1-10.module+el8.1.0+3366+6dfb954c RHSA-2025:14117
RHEL 8.8 TUS relaxngDatatype 2011.1-7.module+el8.1.0+3366+6dfb954c RHSA-2025:14117
RHEL 8.8 TUS resteasy 3.0.26-7.module+el8.8.0+22365+b433a336 RHSA-2025:14117
RHEL 8.8 TUS slf4j +1 1.7.25-4.module+el8.1.0+3366+6dfb954c RHSA-2025:14117
RHEL 8.8 TUS stax-ex 1.7.7-8.module+el8.2.0+5723+4574fbff RHSA-2025:14117
RHEL 8.8 TUS velocity 1.7-24.module+el8.1.0+3366+6dfb954c RHSA-2025:14117
RHEL 8.8 TUS xalan-j2 2.7.1-38.module+el8.1.0+3366+6dfb954c RHSA-2025:14117
RHEL 8.8 TUS xerces-j2 2.11.0-34.module+el8.1.0+3366+6dfb954c RHSA-2025:14117
RHEL 8.8 TUS xml-commons-apis 1.4.01-25.module+el8.1.0+3366+6dfb954c RHSA-2025:14117
RHEL 8.8 TUS xml-commons-resolver 1.2-26.module+el8.1.0+3366+6dfb954c RHSA-2025:14117
RHEL 8.8 TUS xmlstreambuffer 1.5.4-8.module+el8.2.0+5723+4574fbff RHSA-2025:14117
RHEL 8.8 TUS xsom 0-19.20110809svn.module+el8.1.0+3366+6dfb954c RHSA-2025:14117
RHEL 8.8 E4S apache-commons-collections 3.2.2-10.module+el8.1.0+3366+6dfb954c RHSA-2025:14117
RHEL 8.8 E4S apache-commons-lang 2.6-21.module+el8.1.0+3366+6dfb954c RHSA-2025:14117
RHEL 8.8 E4S apache-commons-net 3.6-3.module+el8.3.0+6805+72837426 RHSA-2025:14117
RHEL 8.8 E4S bea-stax +1 1.2.0-16.module+el8.1.0+3366+6dfb954c RHSA-2025:14117
RHEL 8.8 E4S fasterxml-oss-parent 69-3.module+el8.8.0+23396+b3893f62 RHSA-2025:14117
RHEL 8.8 E4S glassfish-fastinfoset 1.2.13-9.module+el8.1.0+3366+6dfb954c RHSA-2025:14117
RHEL 8.8 E4S glassfish-jaxb +3 2.2.11-11.module+el8.1.0+3366+6dfb954c RHSA-2025:14117
RHEL 8.8 E4S glassfish-jaxb-api 2.2.12-8.module+el8.1.0+3366+6dfb954c RHSA-2025:14117
RHEL 8.8 E4S jackson-annotations 2.19.1-3.module+el8.8.0+23396+b3893f62 RHSA-2025:14117
RHEL 8.8 E4S jackson-bom 2.19.1-4.module+el8.8.0+23413+86800787 RHSA-2025:14117
RHEL 8.8 E4S jackson-core 2.19.1-4.module+el8.8.0+23396+b3893f62 RHSA-2025:14117
RHEL 8.8 E4S jackson-databind 2.19.1-1.module+el8.8.0+23396+b3893f62 RHSA-2025:14117
RHEL 8.8 E4S jackson-jaxrs-providers +1 2.19.1-2.module+el8.8.0+23396+b3893f62 RHSA-2025:14117
RHEL 8.8 E4S jackson-modules-base +1 2.19.1-1.module+el8.8.0+23405+763e93bf RHSA-2025:14117
RHEL 8.8 E4S jackson-parent 2.19.2-3.module+el8.8.0+23413+86800787 RHSA-2025:14117
RHEL 8.8 E4S jakarta-commons-httpclient 1:3.1-28.module+el8.1.0+3366+6dfb954c RHSA-2025:14117
RHEL 8.8 E4S javassist +1 3.18.1-8.module+el8.1.0+3366+6dfb954c RHSA-2025:14117
RHEL 8.8 E4S pki-servlet-engine 1:9.0.62-1.module+el8.8.0+22367+4894538d RHSA-2025:14117
RHEL 8.8 E4S python-nss +2 1.0.1-10.module+el8.1.0+3366+6dfb954c RHSA-2025:14117
RHEL 8.8 E4S relaxngDatatype 2011.1-7.module+el8.1.0+3366+6dfb954c RHSA-2025:14117
RHEL 8.8 E4S resteasy 3.0.26-7.module+el8.8.0+22365+b433a336 RHSA-2025:14117
RHEL 8.8 E4S slf4j +1 1.7.25-4.module+el8.1.0+3366+6dfb954c RHSA-2025:14117
RHEL 8.8 E4S stax-ex 1.7.7-8.module+el8.2.0+5723+4574fbff RHSA-2025:14117
RHEL 8.8 E4S velocity 1.7-24.module+el8.1.0+3366+6dfb954c RHSA-2025:14117
RHEL 8.8 E4S xalan-j2 2.7.1-38.module+el8.1.0+3366+6dfb954c RHSA-2025:14117
RHEL 8.8 E4S xerces-j2 2.11.0-34.module+el8.1.0+3366+6dfb954c RHSA-2025:14117
RHEL 8.8 E4S xml-commons-apis 1.4.01-25.module+el8.1.0+3366+6dfb954c RHSA-2025:14117
RHEL 8.8 E4S xml-commons-resolver 1.2-26.module+el8.1.0+3366+6dfb954c RHSA-2025:14117
RHEL 8.8 E4S xmlstreambuffer 1.5.4-8.module+el8.2.0+5723+4574fbff RHSA-2025:14117
RHEL 8.8 E4S xsom 0-19.20110809svn.module+el8.1.0+3366+6dfb954c RHSA-2025:14117
RHEL 8.6 TUS apache-commons-collections 3.2.2-10.module+el8.1.0+3366+6dfb954c RHSA-2025:14118
RHEL 8.6 TUS apache-commons-lang 2.6-21.module+el8.1.0+3366+6dfb954c RHSA-2025:14118
RHEL 8.6 TUS apache-commons-net 3.6-3.module+el8.3.0+6805+72837426 RHSA-2025:14118
RHEL 8.6 TUS bea-stax +1 1.2.0-16.module+el8.1.0+3366+6dfb954c RHSA-2025:14118
RHEL 8.6 TUS fasterxml-oss-parent 69-2.module+el8.6.0+23397+419fb810 RHSA-2025:14118
RHEL 8.6 TUS glassfish-fastinfoset 1.2.13-9.module+el8.1.0+3366+6dfb954c RHSA-2025:14118
RHEL 8.6 TUS glassfish-jaxb +3 2.2.11-11.module+el8.1.0+3366+6dfb954c RHSA-2025:14118
RHEL 8.6 TUS glassfish-jaxb-api 2.2.12-8.module+el8.1.0+3366+6dfb954c RHSA-2025:14118
RHEL 8.6 TUS jackson-bom +2 2.19.1-2.module+el8.6.0+23397+419fb810 RHSA-2025:14118
RHEL 8.6 TUS jackson-databind +4 2.19.1-1.module+el8.6.0+23397+419fb810 RHSA-2025:14118
RHEL 8.6 TUS jackson-parent 2.19.2-2.module+el8.6.0+23397+419fb810 RHSA-2025:14118
RHEL 8.6 TUS jakarta-commons-httpclient 1:3.1-28.module+el8.1.0+3366+6dfb954c RHSA-2025:14118
RHEL 8.6 TUS javassist +1 3.18.1-8.module+el8.1.0+3366+6dfb954c RHSA-2025:14118
RHEL 8.6 TUS pki-servlet-engine +1 1:9.0.30-3.module+el8.6.0+23397+419fb810.2 RHSA-2025:14118
RHEL 8.6 TUS python-nss +2 1.0.1-10.module+el8.1.0+3366+6dfb954c RHSA-2025:14118
RHEL 8.6 TUS relaxngDatatype 2011.1-7.module+el8.1.0+3366+6dfb954c RHSA-2025:14118
RHEL 8.6 TUS resteasy 3.0.26-6.module+el8.6.0+23400+aafc0b27 RHSA-2025:14118
RHEL 8.6 TUS slf4j +1 1.7.25-4.module+el8.1.0+3366+6dfb954c RHSA-2025:14118
RHEL 8.6 TUS stax-ex 1.7.7-8.module+el8.2.0+5723+4574fbff RHSA-2025:14118
RHEL 8.6 TUS velocity 1.7-24.module+el8.1.0+3366+6dfb954c RHSA-2025:14118
RHEL 8.6 TUS xalan-j2 2.7.1-38.module+el8.1.0+3366+6dfb954c RHSA-2025:14118
RHEL 8.6 TUS xerces-j2 2.11.0-34.module+el8.1.0+3366+6dfb954c RHSA-2025:14118
RHEL 8.6 TUS xml-commons-apis 1.4.01-25.module+el8.1.0+3366+6dfb954c RHSA-2025:14118
RHEL 8.6 TUS xml-commons-resolver 1.2-26.module+el8.1.0+3366+6dfb954c RHSA-2025:14118
RHEL 8.6 TUS xmlstreambuffer 1.5.4-8.module+el8.2.0+5723+4574fbff RHSA-2025:14118
RHEL 8.6 TUS xsom 0-19.20110809svn.module+el8.1.0+3366+6dfb954c RHSA-2025:14118
RHEL 8.6 E4S apache-commons-collections 3.2.2-10.module+el8.1.0+3366+6dfb954c RHSA-2025:14118
RHEL 8.6 E4S apache-commons-lang 2.6-21.module+el8.1.0+3366+6dfb954c RHSA-2025:14118
RHEL 8.6 E4S apache-commons-net 3.6-3.module+el8.3.0+6805+72837426 RHSA-2025:14118
RHEL 8.6 E4S bea-stax +1 1.2.0-16.module+el8.1.0+3366+6dfb954c RHSA-2025:14118
RHEL 8.6 E4S fasterxml-oss-parent 69-2.module+el8.6.0+23397+419fb810 RHSA-2025:14118
RHEL 8.6 E4S glassfish-fastinfoset 1.2.13-9.module+el8.1.0+3366+6dfb954c RHSA-2025:14118
RHEL 8.6 E4S glassfish-jaxb +3 2.2.11-11.module+el8.1.0+3366+6dfb954c RHSA-2025:14118
RHEL 8.6 E4S glassfish-jaxb-api 2.2.12-8.module+el8.1.0+3366+6dfb954c RHSA-2025:14118
RHEL 8.6 E4S jackson-bom +2 2.19.1-2.module+el8.6.0+23397+419fb810 RHSA-2025:14118
RHEL 8.6 E4S jackson-databind +4 2.19.1-1.module+el8.6.0+23397+419fb810 RHSA-2025:14118
RHEL 8.6 E4S jackson-parent 2.19.2-2.module+el8.6.0+23397+419fb810 RHSA-2025:14118
RHEL 8.6 E4S jakarta-commons-httpclient 1:3.1-28.module+el8.1.0+3366+6dfb954c RHSA-2025:14118
RHEL 8.6 E4S javassist +1 3.18.1-8.module+el8.1.0+3366+6dfb954c RHSA-2025:14118
RHEL 8.6 E4S pki-servlet-engine +1 1:9.0.30-3.module+el8.6.0+23397+419fb810.2 RHSA-2025:14118
RHEL 8.6 E4S python-nss +2 1.0.1-10.module+el8.1.0+3366+6dfb954c RHSA-2025:14118
RHEL 8.6 E4S relaxngDatatype 2011.1-7.module+el8.1.0+3366+6dfb954c RHSA-2025:14118
RHEL 8.6 E4S resteasy 3.0.26-6.module+el8.6.0+23400+aafc0b27 RHSA-2025:14118
RHEL 8.6 E4S slf4j +1 1.7.25-4.module+el8.1.0+3366+6dfb954c RHSA-2025:14118
RHEL 8.6 E4S stax-ex 1.7.7-8.module+el8.2.0+5723+4574fbff RHSA-2025:14118
RHEL 8.6 E4S velocity 1.7-24.module+el8.1.0+3366+6dfb954c RHSA-2025:14118
RHEL 8.6 E4S xalan-j2 2.7.1-38.module+el8.1.0+3366+6dfb954c RHSA-2025:14118
RHEL 8.6 E4S xerces-j2 2.11.0-34.module+el8.1.0+3366+6dfb954c RHSA-2025:14118
RHEL 8.6 E4S xml-commons-apis 1.4.01-25.module+el8.1.0+3366+6dfb954c RHSA-2025:14118
RHEL 8.6 E4S xml-commons-resolver 1.2-26.module+el8.1.0+3366+6dfb954c RHSA-2025:14118
RHEL 8.6 E4S xmlstreambuffer 1.5.4-8.module+el8.2.0+5723+4574fbff RHSA-2025:14118
RHEL 8.6 E4S xsom 0-19.20110809svn.module+el8.1.0+3366+6dfb954c RHSA-2025:14118
RHEL 8.6 AUS apache-commons-collections 3.2.2-10.module+el8.1.0+3366+6dfb954c RHSA-2025:14118
RHEL 8.6 AUS apache-commons-lang 2.6-21.module+el8.1.0+3366+6dfb954c RHSA-2025:14118
RHEL 8.6 AUS apache-commons-net 3.6-3.module+el8.3.0+6805+72837426 RHSA-2025:14118
RHEL 8.6 AUS bea-stax +1 1.2.0-16.module+el8.1.0+3366+6dfb954c RHSA-2025:14118
RHEL 8.6 AUS fasterxml-oss-parent 69-2.module+el8.6.0+23397+419fb810 RHSA-2025:14118
RHEL 8.6 AUS glassfish-fastinfoset 1.2.13-9.module+el8.1.0+3366+6dfb954c RHSA-2025:14118
RHEL 8.6 AUS glassfish-jaxb +3 2.2.11-11.module+el8.1.0+3366+6dfb954c RHSA-2025:14118
RHEL 8.6 AUS glassfish-jaxb-api 2.2.12-8.module+el8.1.0+3366+6dfb954c RHSA-2025:14118
RHEL 8.6 AUS jackson-bom +2 2.19.1-2.module+el8.6.0+23397+419fb810 RHSA-2025:14118
RHEL 8.6 AUS jackson-databind +4 2.19.1-1.module+el8.6.0+23397+419fb810 RHSA-2025:14118
RHEL 8.6 AUS jackson-parent 2.19.2-2.module+el8.6.0+23397+419fb810 RHSA-2025:14118
RHEL 8.6 AUS jakarta-commons-httpclient 1:3.1-28.module+el8.1.0+3366+6dfb954c RHSA-2025:14118
RHEL 8.6 AUS javassist +1 3.18.1-8.module+el8.1.0+3366+6dfb954c RHSA-2025:14118
RHEL 8.6 AUS pki-servlet-engine +1 1:9.0.30-3.module+el8.6.0+23397+419fb810.2 RHSA-2025:14118
RHEL 8.6 AUS python-nss +2 1.0.1-10.module+el8.1.0+3366+6dfb954c RHSA-2025:14118
RHEL 8.6 AUS relaxngDatatype 2011.1-7.module+el8.1.0+3366+6dfb954c RHSA-2025:14118
RHEL 8.6 AUS resteasy 3.0.26-6.module+el8.6.0+23400+aafc0b27 RHSA-2025:14118
RHEL 8.6 AUS slf4j +1 1.7.25-4.module+el8.1.0+3366+6dfb954c RHSA-2025:14118
RHEL 8.6 AUS stax-ex 1.7.7-8.module+el8.2.0+5723+4574fbff RHSA-2025:14118
RHEL 8.6 AUS velocity 1.7-24.module+el8.1.0+3366+6dfb954c RHSA-2025:14118
RHEL 8.6 AUS xalan-j2 2.7.1-38.module+el8.1.0+3366+6dfb954c RHSA-2025:14118
RHEL 8.6 AUS xerces-j2 2.11.0-34.module+el8.1.0+3366+6dfb954c RHSA-2025:14118
RHEL 8.6 AUS xml-commons-apis 1.4.01-25.module+el8.1.0+3366+6dfb954c RHSA-2025:14118
RHEL 8.6 AUS xml-commons-resolver 1.2-26.module+el8.1.0+3366+6dfb954c RHSA-2025:14118
RHEL 8.6 AUS xmlstreambuffer 1.5.4-8.module+el8.2.0+5723+4574fbff RHSA-2025:14118
RHEL 8.6 AUS xsom 0-19.20110809svn.module+el8.1.0+3366+6dfb954c RHSA-2025:14118
RHEL 8.4 EUS Long Life apache-commons-collections 3.2.2-10.module+el8.1.0+3366+6dfb954c RHSA-2025:14116
RHEL 8.4 EUS Long Life apache-commons-lang 2.6-21.module+el8.1.0+3366+6dfb954c RHSA-2025:14116
RHEL 8.4 EUS Long Life apache-commons-net 3.6-3.module+el8.3.0+6805+72837426 RHSA-2025:14116
RHEL 8.4 EUS Long Life bea-stax +1 1.2.0-16.module+el8.1.0+3366+6dfb954c RHSA-2025:14116
RHEL 8.4 EUS Long Life fasterxml-oss-parent 69-3.module+el8.4.0+23391+b488e6bf RHSA-2025:14116
RHEL 8.4 EUS Long Life glassfish-fastinfoset 1.2.13-9.module+el8.1.0+3366+6dfb954c RHSA-2025:14116
RHEL 8.4 EUS Long Life glassfish-jaxb +3 2.2.11-11.module+el8.1.0+3366+6dfb954c RHSA-2025:14116
RHEL 8.4 EUS Long Life glassfish-jaxb-api 2.2.12-8.module+el8.1.0+3366+6dfb954c RHSA-2025:14116
RHEL 8.4 EUS Long Life jackson-bom +5 2.19.1-1.module+el8.4.0+23391+b488e6bf RHSA-2025:14116
RHEL 8.4 EUS Long Life jackson-core +1 2.19.1-2.module+el8.4.0+23391+b488e6bf RHSA-2025:14116
RHEL 8.4 EUS Long Life jackson-parent 2.19.2-1.module+el8.4.0+23391+b488e6bf RHSA-2025:14116
RHEL 8.4 EUS Long Life jakarta-commons-httpclient 1:3.1-28.module+el8.1.0+3366+6dfb954c RHSA-2025:14116
RHEL 8.4 EUS Long Life javassist +1 3.18.1-8.module+el8.1.0+3366+6dfb954c RHSA-2025:14116
RHEL 8.4 EUS Long Life pki-servlet-engine +1 1:9.0.30-1.module+el8.4.0+23391+b488e6bf.2 RHSA-2025:14116
RHEL 8.4 EUS Long Life python-nss +2 1.0.1-10.module+el8.1.0+3366+6dfb954c RHSA-2025:14116
RHEL 8.4 EUS Long Life relaxngDatatype 2011.1-7.module+el8.1.0+3366+6dfb954c RHSA-2025:14116
RHEL 8.4 EUS Long Life resteasy 3.0.26-6.module+el8.4.0+23399+fc91639f RHSA-2025:14116
RHEL 8.4 EUS Long Life slf4j +1 1.7.25-4.module+el8.1.0+3366+6dfb954c RHSA-2025:14116
RHEL 8.4 EUS Long Life stax-ex 1.7.7-8.module+el8.2.0+5723+4574fbff RHSA-2025:14116
RHEL 8.4 EUS Long Life velocity 1.7-24.module+el8.1.0+3366+6dfb954c RHSA-2025:14116
RHEL 8.4 EUS Long Life xalan-j2 2.7.1-38.module+el8.1.0+3366+6dfb954c RHSA-2025:14116
RHEL 8.4 EUS Long Life xerces-j2 2.11.0-34.module+el8.1.0+3366+6dfb954c RHSA-2025:14116
RHEL 8.4 EUS Long Life xml-commons-apis 1.4.01-25.module+el8.1.0+3366+6dfb954c RHSA-2025:14116
RHEL 8.4 EUS Long Life xml-commons-resolver 1.2-26.module+el8.1.0+3366+6dfb954c RHSA-2025:14116
RHEL 8.4 EUS Long Life xmlstreambuffer 1.5.4-8.module+el8.2.0+5723+4574fbff RHSA-2025:14116
RHEL 8.4 EUS Long Life xsom 0-19.20110809svn.module+el8.1.0+3366+6dfb954c RHSA-2025:14116
RHEL 8.4 AUS apache-commons-collections 3.2.2-10.module+el8.1.0+3366+6dfb954c RHSA-2025:14116
RHEL 8.4 AUS apache-commons-lang 2.6-21.module+el8.1.0+3366+6dfb954c RHSA-2025:14116
RHEL 8.4 AUS apache-commons-net 3.6-3.module+el8.3.0+6805+72837426 RHSA-2025:14116
RHEL 8.4 AUS bea-stax +1 1.2.0-16.module+el8.1.0+3366+6dfb954c RHSA-2025:14116
RHEL 8.4 AUS fasterxml-oss-parent 69-3.module+el8.4.0+23391+b488e6bf RHSA-2025:14116
RHEL 8.4 AUS glassfish-fastinfoset 1.2.13-9.module+el8.1.0+3366+6dfb954c RHSA-2025:14116
RHEL 8.4 AUS glassfish-jaxb +3 2.2.11-11.module+el8.1.0+3366+6dfb954c RHSA-2025:14116
RHEL 8.4 AUS glassfish-jaxb-api 2.2.12-8.module+el8.1.0+3366+6dfb954c RHSA-2025:14116
RHEL 8.4 AUS jackson-bom +5 2.19.1-1.module+el8.4.0+23391+b488e6bf RHSA-2025:14116
RHEL 8.4 AUS jackson-core +1 2.19.1-2.module+el8.4.0+23391+b488e6bf RHSA-2025:14116
RHEL 8.4 AUS jackson-parent 2.19.2-1.module+el8.4.0+23391+b488e6bf RHSA-2025:14116
RHEL 8.4 AUS jakarta-commons-httpclient 1:3.1-28.module+el8.1.0+3366+6dfb954c RHSA-2025:14116
RHEL 8.4 AUS javassist +1 3.18.1-8.module+el8.1.0+3366+6dfb954c RHSA-2025:14116
RHEL 8.4 AUS pki-servlet-engine +1 1:9.0.30-1.module+el8.4.0+23391+b488e6bf.2 RHSA-2025:14116
RHEL 8.4 AUS python-nss +2 1.0.1-10.module+el8.1.0+3366+6dfb954c RHSA-2025:14116
RHEL 8.4 AUS relaxngDatatype 2011.1-7.module+el8.1.0+3366+6dfb954c RHSA-2025:14116
RHEL 8.4 AUS resteasy 3.0.26-6.module+el8.4.0+23399+fc91639f RHSA-2025:14116
RHEL 8.4 AUS slf4j +1 1.7.25-4.module+el8.1.0+3366+6dfb954c RHSA-2025:14116
RHEL 8.4 AUS stax-ex 1.7.7-8.module+el8.2.0+5723+4574fbff RHSA-2025:14116
RHEL 8.4 AUS velocity 1.7-24.module+el8.1.0+3366+6dfb954c RHSA-2025:14116
RHEL 8.4 AUS xalan-j2 2.7.1-38.module+el8.1.0+3366+6dfb954c RHSA-2025:14116
RHEL 8.4 AUS xerces-j2 2.11.0-34.module+el8.1.0+3366+6dfb954c RHSA-2025:14116
RHEL 8.4 AUS xml-commons-apis 1.4.01-25.module+el8.1.0+3366+6dfb954c RHSA-2025:14116
RHEL 8.4 AUS xml-commons-resolver 1.2-26.module+el8.1.0+3366+6dfb954c RHSA-2025:14116
RHEL 8.4 AUS xmlstreambuffer 1.5.4-8.module+el8.2.0+5723+4574fbff RHSA-2025:14116
RHEL 8.4 AUS xsom 0-19.20110809svn.module+el8.1.0+3366+6dfb954c RHSA-2025:14116
RHEL 8.2 AUS apache-commons-collections 3.2.2-10.module+el8.1.0+3366+6dfb954c RHSA-2025:14127
RHEL 8.2 AUS apache-commons-lang 2.6-21.module+el8.1.0+3366+6dfb954c RHSA-2025:14127
RHEL 8.2 AUS bea-stax +1 1.2.0-16.module+el8.1.0+3366+6dfb954c RHSA-2025:14127
RHEL 8.2 AUS fasterxml-oss-parent 69-1.module+el8.2.0+23390+7631bd3f RHSA-2025:14127
RHEL 8.2 AUS glassfish-fastinfoset 1.2.13-9.module+el8.1.0+3366+6dfb954c RHSA-2025:14127
RHEL 8.2 AUS glassfish-jaxb +3 2.2.11-11.module+el8.1.0+3366+6dfb954c RHSA-2025:14127
RHEL 8.2 AUS glassfish-jaxb-api 2.2.12-8.module+el8.1.0+3366+6dfb954c RHSA-2025:14127
RHEL 8.2 AUS jackson-bom +7 2.19.1-1.module+el8.2.0+23390+7631bd3f RHSA-2025:14127
RHEL 8.2 AUS jackson-parent 2.19.2-1.module+el8.2.0+23390+7631bd3f RHSA-2025:14127
RHEL 8.2 AUS jakarta-commons-httpclient 1:3.1-28.module+el8.1.0+3366+6dfb954c RHSA-2025:14127
RHEL 8.2 AUS javassist +1 3.18.1-8.module+el8.1.0+3366+6dfb954c RHSA-2025:14127
RHEL 8.2 AUS pki-servlet-engine +1 1:9.0.7-16.module+el8.2.0+23390+7631bd3f.2 RHSA-2025:14127
RHEL 8.2 AUS python-nss +2 1.0.1-10.module+el8.1.0+3366+6dfb954c RHSA-2025:14127
RHEL 8.2 AUS relaxngDatatype 2011.1-7.module+el8.1.0+3366+6dfb954c RHSA-2025:14127
RHEL 8.2 AUS resteasy 3.0.26-3.module+el8.2.0+23401+65186842 RHSA-2025:14127
RHEL 8.2 AUS slf4j +1 1.7.25-4.module+el8.1.0+3366+6dfb954c RHSA-2025:14127
RHEL 8.2 AUS stax-ex 1.7.7-8.module+el8.2.0+5723+4574fbff RHSA-2025:14127
RHEL 8.2 AUS velocity 1.7-24.module+el8.1.0+3366+6dfb954c RHSA-2025:14127
RHEL 8.2 AUS xalan-j2 2.7.1-38.module+el8.1.0+3366+6dfb954c RHSA-2025:14127
RHEL 8.2 AUS xerces-j2 2.11.0-34.module+el8.1.0+3366+6dfb954c RHSA-2025:14127
RHEL 8.2 AUS xml-commons-apis 1.4.01-25.module+el8.1.0+3366+6dfb954c RHSA-2025:14127
RHEL 8.2 AUS xml-commons-resolver 1.2-26.module+el8.1.0+3366+6dfb954c RHSA-2025:14127
RHEL 8.2 AUS xmlstreambuffer 1.5.4-8.module+el8.2.0+5723+4574fbff RHSA-2025:14127
RHEL 8.2 AUS xsom 0-19.20110809svn.module+el8.1.0+3366+6dfb954c RHSA-2025:14127
Red Hat Ocp Tools 4 jenkins 2.504.2.1750846524-3.el9 RHSA-2025:10120, RHSA-2025:10119, RHSA-2025:10118
Red Hat Ocp Tools 4 jenkins-2-plugins 4.12.1750933270-1.el8 RHSA-2025:10120, RHSA-2025:10119, RHSA-2025:10118
Red Hat Jboss Enterprise Application Platform Eus 7 eap7-jackson-annotations +3 2.8.11-2.redhat_00004.1.ep7.el7 RHSA-2026:0743, RHSA-2026:0742
Red Hat Jboss Enterprise Application Platform Eus 7 eap7-jackson-core +4 2.8.11-3.redhat_00004.1.ep7.el7 RHSA-2026:0743, RHSA-2026:0742
Red Hat Jboss Enterprise Application Platform Eus 7 eap7-jackson-databind +1 2.10.4-6.redhat_00008.1.el7eap RHSA-2026:0743
Red Hat Jboss Enterprise Application Platform Eus 7 eap7-jboss-server-migration +21 1.7.2-20.Final_redhat_00021.1.el7eap RHSA-2026:0743
Red Hat Jboss Enterprise Application Platform Eus 7 eap7-netty +1 4.1.63-3.Final_redhat_00004.1.ep7.el7 RHSA-2026:0743, RHSA-2026:0742
Red Hat Jboss Enterprise Application Platform Eus 7 eap7-undertow 1.4.18-18.SP16_redhat_00001.1.ep7.el7 RHSA-2026:0743, RHSA-2026:0742
Red Hat Jboss Enterprise Application Platform Eus 7 eap7-wildfly +1 7.1.13-6.GA_redhat_00002.1.ep7.el7 RHSA-2026:0743, RHSA-2026:0742
Red Hat Jboss Enterprise Application Platform Eus 7 eap7-wildfly-javadocs +2 7.3.16-3.GA_redhat_00003.1.el7eap RHSA-2026:0743
Red Hat Jboss Enterprise Application Platform Els 7 eap7-apache-cxf +3 3.5.11-1.SP1_redhat_00001.1.el7eap RHSA-2026:4917, RHSA-2026:4916, RHSA-2026:4915
Red Hat Jboss Enterprise Application Platform Els 7 eap7-eclipse-jgit 5.13.5.202508271544-2.r_redhat_00001.1.el7eap RHSA-2026:4917, RHSA-2026:4916, RHSA-2026:4915
Red Hat Jboss Enterprise Application Platform Els 7 eap7-hibernate +4 5.3.38-1.Final_redhat_00001.1.el7eap RHSA-2026:4917, RHSA-2026:4916, RHSA-2026:4915
Red Hat Jboss Enterprise Application Platform Els 7 eap7-jboss-marshalling +1 2.0.16-1.Final_redhat_00001.1.el7eap RHSA-2026:4917, RHSA-2026:4916, RHSA-2026:4915
Red Hat Jboss Enterprise Application Platform Els 7 eap7-netty +26 4.1.124-1.Final_redhat_00001.1.el7eap RHSA-2026:4917, RHSA-2026:4916, RHSA-2026:4915
Red Hat Jboss Enterprise Application Platform Els 7 eap7-undertow 2.2.39-1.Final_redhat_00001.1.el7eap RHSA-2026:4917, RHSA-2026:4916, RHSA-2026:4915
Red Hat Jboss Enterprise Application Platform Els 7 eap7-wildfly +4 7.4.24-4.GA_redhat_00002.1.el7eap RHSA-2026:4917, RHSA-2026:4916, RHSA-2026:4915
Red Hat Jboss Enterprise Application Platform Els 7 eap7-wildfly-java-jdk17 7.4.24-4.GA_redhat_00002.1.el8eap RHSA-2026:4917, RHSA-2026:4916
Red Hat JBoss EAP 7 eap7-jackson-core 2.12.7-2.SP1_redhat_00001.1.el7eap RHSA-2025:11473
Red Hat JBoss EAP 7 eap7-jackson-databind +9 2.12.7-2.redhat_00004.1.el7eap RHSA-2025:11473
Red Hat JBoss EAP 7 eap7-wildfly +4 7.4.23-4.GA_redhat_00003.1.el7eap RHSA-2025:11473
Red Hat JBoss EAP 7 eap7-wildfly-java-jdk17 7.4.23-4.GA_redhat_00003.1.el8eap RHSA-2025:11473

AlmaLinux

Errata ↗
ReleasePackageFixed inAdvisory
AlmaLinux 9 pki-jackson-core +5 2.19.1-1.el9_6 ALSA-2025:12280
AlmaLinux 8 apache-commons-collections 3.2.2-10.module_el8.5.0+2577+9e95fe00 ALSA-2025:14126
AlmaLinux 8 apache-commons-lang 2.6-21.module_el8.5.0+2577+9e95fe00 ALSA-2025:14126
AlmaLinux 8 apache-commons-net 3.6-3.module_el8.5.0+2577+9e95fe00 ALSA-2025:14126
AlmaLinux 8 bea-stax-api 1.2.0-16.module_el8.5.0+2577+9e95fe00 ALSA-2025:14126
AlmaLinux 8 fasterxml-oss-parent 69-1.module_el8.10.0+4034+20822525 ALSA-2025:14126
AlmaLinux 8 glassfish-fastinfoset 1.2.13-9.module_el8.5.0+2577+9e95fe00 ALSA-2025:14126
AlmaLinux 8 glassfish-jaxb-api 2.2.12-8.module_el8.5.0+2577+9e95fe00 ALSA-2025:14126
AlmaLinux 8 glassfish-jaxb-core +2 2.2.11-12.module_el8.10.0+3791+e0637953 ALSA-2025:14126
AlmaLinux 8 jackson-bom +8 2.19.1-1.module_el8.10.0+4034+20822525 ALSA-2025:14126
AlmaLinux 8 jakarta-commons-httpclient 1:3.1-28.module_el8.5.0+2577+9e95fe00 ALSA-2025:14126
AlmaLinux 8 javassist +1 3.18.1-8.module_el8.5.0+2577+9e95fe00 ALSA-2025:14126
AlmaLinux 8 pki-servlet-engine 1:9.0.62-1.module_el8.10.0+3791+e0637953 ALSA-2025:14126
AlmaLinux 8 relaxngDatatype 2011.1-7.module_el8.5.0+2577+9e95fe00 ALSA-2025:14126
AlmaLinux 8 slf4j +1 1.7.25-4.module_el8.5.0+2577+9e95fe00 ALSA-2025:14126
AlmaLinux 8 stax-ex 1.7.7-8.module_el8.5.0+2577+9e95fe00 ALSA-2025:14126
AlmaLinux 8 velocity 1.7-24.module_el8.5.0+2577+9e95fe00 ALSA-2025:14126
AlmaLinux 8 xalan-j2 2.7.1-38.module_el8.5.0+2577+9e95fe00 ALSA-2025:14126
AlmaLinux 8 xerces-j2 2.11.0-34.module_el8.5.0+2577+9e95fe00 ALSA-2025:14126
AlmaLinux 8 xml-commons-apis 1.4.01-25.module_el8.5.0+2577+9e95fe00 ALSA-2025:14126
AlmaLinux 8 xml-commons-resolver 1.2-26.module_el8.5.0+2577+9e95fe00 ALSA-2025:14126
AlmaLinux 8 xmlstreambuffer 1.5.4-8.module_el8.5.0+2577+9e95fe00 ALSA-2025:14126
AlmaLinux 8 xsom 0-19.20110809svn.module_el8.5.0+2577+9e95fe00 ALSA-2025:14126

Rocky Linux

Errata ↗
ReleasePackageFixed inAdvisory
Rocky Linux 9 jackson-core +4 2.19.1-1.el9_6 RLSA-2025:12280
Rocky Linux 8 apache-commons-collections 3.2.2-10.module+el8.3.0+74+855e3f5d RLSA-2025:14126
Rocky Linux 8 apache-commons-lang 2.6-21.module+el8.3.0+74+855e3f5d RLSA-2025:14126
Rocky Linux 8 apache-commons-net 3.6-3.module+el8.3.0+74+855e3f5d RLSA-2025:14126
Rocky Linux 8 bea-stax 1.2.0-16.module+el8.10.0+1763+c7c02164 RLSA-2025:14126
Rocky Linux 8 glassfish-fastinfoset 1.2.13-9.module+el8.10.0+1763+c7c02164 RLSA-2025:14126
Rocky Linux 8 glassfish-jaxb 2.2.11-12.module+el8.10.0+1763+c7c02164 RLSA-2025:14126
Rocky Linux 8 glassfish-jaxb-api 2.2.12-8.module+el8.10.0+1763+c7c02164 RLSA-2025:14126
Rocky Linux 8 jackson-core +2 2.19.1-1.module+el8.10.0+2052+1b0fb438 RLSA-2025:14126
Rocky Linux 8 jakarta-commons-httpclient 1:3.1-28.module+el8.3.0+74+855e3f5d RLSA-2025:14126
Rocky Linux 8 javassist 3.18.1-8.module+el8.3.0+74+855e3f5d RLSA-2025:14126
Rocky Linux 8 pki-servlet-engine 1:9.0.62-1.module+el8.10.0+1767+f923f786 RLSA-2025:14126
Rocky Linux 8 relaxngDatatype 2011.1-7.module+el8.10.0+1763+c7c02164 RLSA-2025:14126
Rocky Linux 8 slf4j 1.7.25-4.module+el8.3.0+74+855e3f5d RLSA-2025:14126
Rocky Linux 8 stax-ex 1.7.7-8.module+el8.10.0+1763+c7c02164 RLSA-2025:14126
Rocky Linux 8 velocity 1.7-24.module+el8.3.0+74+855e3f5d RLSA-2025:14126
Rocky Linux 8 xalan-j2 2.7.1-38.module+el8.3.0+74+855e3f5d RLSA-2025:14126
Rocky Linux 8 xerces-j2 2.11.0-34.module+el8.3.0+74+855e3f5d RLSA-2025:14126
Rocky Linux 8 xml-commons-apis 1.4.01-25.module+el8.3.0+74+855e3f5d RLSA-2025:14126
Rocky Linux 8 xml-commons-resolver 1.2-26.module+el8.3.0+74+855e3f5d RLSA-2025:14126
Rocky Linux 8 xmlstreambuffer 1.5.4-8.module+el8.10.0+1763+c7c02164 RLSA-2025:14126
Rocky Linux 8 xsom 0-19.20110809svn.module+el8.10.0+1763+c7c02164 RLSA-2025:14126

Amazon Linux

ReleasePackageFixed inAdvisory
Amazon Linux 2023 jackson-core 2.16.1-4.amzn2023.0.1 ALAS2023-2025-1127
Amazon Linux 2 jackson +1 1.9.4-7.amzn2.0.1 ALAS2-2026-4098, ALAS2-2025-2934

Oracle Linux

ReleasePackageFixed inAdvisory
Oracle Linux 9 pki-jackson-core +5 2.19.1-1.el9_6 ELSA-2025-12280
Oracle Linux 8 apache-commons-collections 3.2.2-10.module+el8.10.0+90642+1ede0e5a ELSA-2025-14126
Oracle Linux 8 apache-commons-lang 2.6-21.module+el8.10.0+90642+1ede0e5a ELSA-2025-14126
Oracle Linux 8 apache-commons-net 3.6-3.module+el8.10.0+90642+1ede0e5a ELSA-2025-14126
Oracle Linux 8 bea-stax-api 1.2.0-16.module+el8.10.0+90642+1ede0e5a ELSA-2025-14126
Oracle Linux 8 fasterxml-oss-parent 69-1.module+el8.10.0+90642+1ede0e5a ELSA-2025-14126
Oracle Linux 8 glassfish-fastinfoset 1.2.13-9.module+el8.10.0+90642+1ede0e5a ELSA-2025-14126
Oracle Linux 8 glassfish-jaxb-api 2.2.12-8.module+el8.10.0+90642+1ede0e5a ELSA-2025-14126
Oracle Linux 8 glassfish-jaxb-core +2 2.2.11-12.module+el8.10.0+90642+1ede0e5a ELSA-2025-14126
Oracle Linux 8 jackson-bom +8 2.19.1-1.module+el8.10.0+90642+1ede0e5a ELSA-2025-14126
Oracle Linux 8 jakarta-commons-httpclient 1:3.1-28.module+el8.10.0+90642+1ede0e5a ELSA-2025-14126
Oracle Linux 8 javassist +1 3.18.1-8.module+el8.10.0+90642+1ede0e5a ELSA-2025-14126
Oracle Linux 8 pki-servlet-engine 1:9.0.62-1.module+el8.10.0+90642+1ede0e5a ELSA-2025-14126
Oracle Linux 8 relaxngDatatype 2011.1-7.module+el8.10.0+90642+1ede0e5a ELSA-2025-14126
Oracle Linux 8 slf4j +1 1.7.25-4.module+el8.10.0+90642+1ede0e5a ELSA-2025-14126
Oracle Linux 8 stax-ex 1.7.7-8.module+el8.10.0+90642+1ede0e5a ELSA-2025-14126
Oracle Linux 8 velocity 1.7-24.module+el8.10.0+90642+1ede0e5a ELSA-2025-14126
Oracle Linux 8 xalan-j2 2.7.1-38.module+el8.10.0+90642+1ede0e5a ELSA-2025-14126
Oracle Linux 8 xerces-j2 2.11.0-34.module+el8.10.0+90642+1ede0e5a ELSA-2025-14126
Oracle Linux 8 xml-commons-apis 1.4.01-25.module+el8.10.0+90642+1ede0e5a ELSA-2025-14126
Oracle Linux 8 xml-commons-resolver 1.2-26.module+el8.10.0+90642+1ede0e5a ELSA-2025-14126
Oracle Linux 8 xmlstreambuffer 1.5.4-8.module+el8.10.0+90642+1ede0e5a ELSA-2025-14126
Oracle Linux 8 xsom 0-19.20110809svn.module+el8.10.0+90642+1ede0e5a ELSA-2025-14126

Wolfi

ReleasePackageFixed inAdvisory
Wolfi rolling cassandra-4.1 +1 4.1.9-r1 —
Wolfi rolling cassandra-reaper 3.8.0-r6 —
Wolfi rolling celeborn-0.6 No fix yet —
Wolfi rolling confluent-common-docker +1 7.6.0-r16 —
Wolfi rolling cqlsh-5.0 5.0.3-r5 —
Wolfi rolling druid 37.0.0-r14 —
Wolfi rolling gradle-stage0 8.0.1-r3 —
Wolfi rolling scala-3.8 3.8.4-r1 —
Wolfi rolling spark-4.0-scala-2.13 4.0.3-r2 —
Wolfi rolling spark-4.1 4.1.0-r1 —
Wolfi rolling spark-4.1-scala-2.13 4.1.2-r5 —
Wolfi rolling tez 0.10.5-r9 —

Public exploits

Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.

Third-party code, not reviewed by us. Public PoCs are sometimes fake or contain malware. Read the code first and run it only in an isolated lab, against systems you are authorised to test.

GitHub 1 repository

  • sassoftware/jackson ★ 1 · Feb 23, 2026

    This repository provides a comprehensive security remediation of denial-of-service and allocation of resources without limits or throttling security vulnerabilities reported in CVE-2025-52999, GHSA-2…

Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.

Affected packages

EcosystemPackageAffectedFixedRecord
Maven com.fasterxml.jackson.core:jackson-core < 2.15.0 2.15.0 GHSA-h46c-h94j-95f3

Advisories 41

References