| CVE-2026-110879 |
jackson-databind validates the outer class of a class-name type ID but accepts attacker-selected classes inside its…
|
9.8
Critique
|
28 oct. 2026 |
| CVE-2026-91777 |
Forward-reference completion for @JsonIdentityInfo object IDs in FasterXML jackson-databind performs a linear scan of…
|
7.5
Élevée
|
23 sept. 2026 |
| CVE-2026-91776 |
TypeDeserializerBase._findDeserializer() in FasterXML jackson-databind caches the resolved deserializer under the raw,…
|
7.5
Élevée
|
23 sept. 2026 |
| CVE-2026-68497 |
jackson-databind binds a JSON string to a javax.xml.datatype.Duration or javax.xml.datatype.XMLGregorianCalendar field…
|
7.5
Élevée
|
11 sept. 2026 |
| CVE-2026-83557 |
DefaultBaseTypeLimitingValidator is the PolymorphicTypeValidator applied automatically whenever @JsonTypeInfo is used…
|
5.6
Moyenne
|
1 sept. 2026 |
| CVE-2026-19032 |
jackson-databind's deserializer for java.nio.file.Path resolves an attacker-supplied URI without restricting the URI…
|
5.3
Moyenne
|
1 sept. 2026 |
| CVE-2026-59889 |
jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor
|
6.5
Moyenne
|
14 juil. 2026 |
| CVE-2026-59888 |
jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor
|
6.5
Moyenne
|
14 juil. 2026 |
| CVE-2026-54518 |
jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor
|
6.5
Moyenne
|
23 juin 2026 |
| CVE-2026-50193 |
jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor
|
6.3
Moyenne
|
23 juin 2026 |
| CVE-2026-54512 |
jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor
|
8.1
Élevée
|
23 juin 2026 |
| CVE-2026-54513 |
jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor
|
8.1
Élevée
|
23 juin 2026 |
| CVE-2026-54514 |
jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor
|
5.3
Moyenne
|
23 juin 2026 |
| CVE-2026-54515 |
jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor
|
5.3
Moyenne
|
23 juin 2026 |
| CVE-2026-54516 |
jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor
|
5.3
Moyenne
|
23 juin 2026 |
| CVE-2026-54517 |
jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor
|
5.3
Moyenne
|
23 juin 2026 |
| CVE-2020-36179 |
FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing,…
|
8.8
Élevée
|
6 janv. 2021 |
| CVE-2020-36180 |
FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing,…
|
8.8
Élevée
|
6 janv. 2021 |
| CVE-2020-36182 |
FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing,…
|
8.8
Élevée
|
6 janv. 2021 |
| CVE-2020-36184 |
FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing,…
|
8.8
Élevée
|
6 janv. 2021 |
| CVE-2020-36181 |
FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing,…
|
8.8
Élevée
|
6 janv. 2021 |
| CVE-2020-11111 |
FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing,…
|
8.8
Élevée
|
31 mars 2020 |
| CVE-2020-11112 |
FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing,…
|
8.8
Élevée
|
31 mars 2020 |
| CVE-2020-11113 |
FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing,…
|
8.8
Élevée
|
31 mars 2020 |
| CVE-2020-10968 |
FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing,…
|
8.8
Élevée
|
26 mars 2020 |