Where
-Infinity
0

Trending

Last week
Last month
Last year

fasterxml jackson-databindjackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson …

Risk 33
Severity
7
First published (updated )
REDHAT-BUG-2492010

fasterxml jackson-databindjackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson …

Risk 33
Severity
7
First published (updated )
REDHAT-BUG-2491999

fasterxml jackson-databindjackson-databind: @JsonView bypass for unwrapped creator parameters in jackson-databind

Risk 40
Severity
6.5
First published (updated )
CVE-2026-54518

maven/com.fasterxml.jackson.core/jackson-databindjackson-databind: Deeply nested JsonNode throws StackOverflowError for toString()

Risk 43
Severity
6.3
First published (updated )
CVE-2026-50193

maven/com.fasterxml.jackson.core:jackson-databindjackson-databind: PolymorphicTypeValidator bypass via generic type parameters allows arbitrary class instantiation

Risk 75
Severity
8.1
First published (updated )
CVE-2026-54512
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

maven/com.fasterxml.jackson.core:jackson-databindjackson-databind: Array subtype allowlist bypass in BasicPolymorphicTypeValidator (allowIfSubTypeIsArray)

Risk 75
Severity
8.1
First published (updated )
CVE-2026-54513

maven/com.fasterxml.jackson.core:jackson-databindjackson-databind: InetSocketAddress deserialization triggers eager DNS resolution (SSRF)

Risk 27
Severity
5.3
First published (updated )
CVE-2026-54514

fasterxml jackson-databindjackson-databind: Case-insensitive deserialization bypasses per-property @JsonIgnoreProperties

Risk 27
Severity
5.3
First published (updated )
CVE-2026-54515

maven/com.fasterxml.jackson.core:jackson-databindjackson-databind: Renamed @JsonIgnore'd setters can deserialize via private fields

Risk 27
Severity
5.3
First published (updated )
CVE-2026-54516

maven/com.fasterxml.jackson.core:jackson-databindjackson-databind: @JsonView bypass for setterless creator properties

Risk 27
Severity
5.3
First published (updated )
CVE-2026-54517
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

fasterxml jackson-corejackson-core contains core low-level incremental ("streaming") parser and generator abstractions use…

Risk 33
Severity
7
First published (updated )
REDHAT-BUG-2374804

fasterxml jackson-corejackson-core Has Potential for StackoverflowError if user parses an input file that contains very deeply nested data

Risk 33
Severity
8.7
EPSS
0.05%
First published (updated )
CVE-2025-52999

fasterxml jackson-databindAn issue was discovered jackson-databind thru 2.15.2 allows attackers to cause a denial of service o…

Risk 29
Severity
4.7
First published (updated )
CVE-2023-35116

fasterxml jackson-databindA flaw was found in Jackson Databind. This issue may allow a malicious user to cause a denial of ser…

Risk 45
Severity
7.5
First published (updated )
CVE-2021-46877

redhat/candlepinIn FasterXML jackson-databind before versions 2.13.4.1 and 2.12.17.1, resource exhaustion can occur …

Risk 46
Severity
7.5
First published (updated )
CVE-2022-42003
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

redhat/eap7-jackson-databindIn FasterXML jackson-databind before 2.13.4, resource exhaustion can occur because of a lack of a ch…

Risk 46
Severity
7.5
First published (updated )
CVE-2022-42004

fasterxml jackson-databindThe com.fasterxml.jackson.core:jackson-databind library before version 2.9.10.4 is vulnerable to an …

Risk 79
Severity
8.1
First published (updated )
CVE-2020-10650

maven/com.fasterxml.jackson.core:jackson-databindSSRF

Risk 63
Severity
8.3
First published (updated )
CVE-2021-20190

Oracle Primavera UnifierFasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadg…

Risk 80
Severity
8.8
First published (updated )
CVE-2020-36180

Oracle Primavera UnifierFasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadg…

Risk 80
Severity
8.8
First published (updated )
CVE-2020-36182
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Oracle Primavera UnifierFasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadg…

Risk 77
Severity
8.1
First published (updated )
CVE-2020-36183

Oracle Primavera GatewayFasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadg…

Risk 80
Severity
8.8
First published (updated )
CVE-2020-36179

Oracle Primavera UnifierFasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadg…

Risk 80
Severity
8.8
First published (updated )
CVE-2020-36181

Oracle Banking PlatformFasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadg…

Risk 78
Severity
8.1
First published (updated )
CVE-2020-36189

Oracle Primavera GatewayA flaw was found in jackson-databind. FasterXML mishandles the interaction between serialization gad…

Risk 78
Severity
8.1
First published (updated )
CVE-2020-35728
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Oracle Primavera UnifierFasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadg…

Risk 78
Severity
8.1
First published (updated )
CVE-2020-36188

Oracle Primavera UnifierFasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadg…

Risk 77
Severity
8.1
First published (updated )
CVE-2020-36185

Oracle Primavera UnifierFasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadg…

Risk 77
Severity
8.1
First published (updated )
CVE-2020-36186

Oracle Primavera UnifierFasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadg…

Risk 80
Severity
8.8
First published (updated )
CVE-2020-36184

Oracle Primavera UnifierFasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadg…

Risk 77
Severity
8.1
First published (updated )
CVE-2020-36187
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203