com.fasterxml.jackson.core:jackson-databind vulnerabilities

latest version

2.18.0
latest non vulnerable version

2.18.0
first published

13 years ago
latest version published

2 months ago
licenses detected
- Apache-2.0
  [2.1.0,2.2.0); [2.4.0-rc1,)
- (Apache-2.0 OR LGPL-2.1)
  [2.2.0,2.4.0-rc1)
- (Apache-2.0 OR LGPL-3.0)
  [2.0.0-RC1,2.1.0)
package manager

View on Maven Repository

Report a new vulnerability Found a mistake?

Direct Vulnerabilities

Known vulnerabilities in the com.fasterxml.jackson.core:jackson-databind package. This does not include vulnerabilities belonging to this package’s dependencies.

Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.

Fix for free

Vulnerability	Vulnerable Version
M Denial of Service (DoS)	[2.4.0,2.12.7.1) [2.13.0,2.13.4)
M Denial of Service (DoS)	[2.4.0,2.12.7.1) [2.13.0,2.13.4.1)
H Denial of Service (DoS)	[,2.12.6.1) [2.13.0,2.13.2.1)
M Denial of Service (DoS)	[2.13.0,2.13.1) [2.10.0.pr1,2.12.6)
H Deserialization of Untrusted Data	[,2.9.10.7)
H Deserialization of Untrusted Data	[,2.9.10.8)
H Deserialization of Untrusted Data	[,2.9.10.8)
H Deserialization of Untrusted Data	[,2.9.10.8)
H Deserialization of Untrusted Data	[,2.9.10.8)
H Deserialization of Untrusted Data	[,2.9.10.8)
H Deserialization of Untrusted Data	[,2.9.10.8)
H Deserialization of Untrusted Data	[,2.9.10.8)
H Deserialization of Untrusted Data	[,2.9.10.8)
H Deserialization of Untrusted Data	[,2.9.10.8)
H Deserialization of Untrusted Data	[,2.9.10.8)
H Deserialization of Untrusted Data	[,2.9.10.8)
H Deserialization of Untrusted Data	[2.0.0,2.9.10.8)
H Deserialization of Untrusted Data	[,2.9.10.8)
H Deserialization of Untrusted Data	[,2.9.10.8)
H XML External Entity (XXE) Injection	[2.6.0,2.6.7.4) [2.9.0,2.9.10.7) [2.10.0,2.10.5.1)
H Deserialization of Untrusted Data	[,2.6.7.4) [2.7.0,2.9.10.4)
H Deserialization of Untrusted Data	[,2.6.7.4) [2.7.0,2.9.10.6)
H Deserialization of Untrusted Data	[,2.6.7.4) [2.7.0,2.9.10.6)
H Deserialization of Untrusted Data	[,2.6.7.4) [2.7.0,2.9.10.5)
H Deserialization of Untrusted Data	[,2.6.7.4) [2.7.0,2.9.10.5)
H Deserialization of Untrusted Data	[,2.6.7.4) [2.7.0,2.9.10.5)
H Deserialization of Untrusted Data	[,2.6.7.4) [2.7.0,2.9.10.5)
H Deserialization of Untrusted Data	[,2.6.7.4) [2.7.0,2.9.10.4)
H Deserialization of Untrusted Data	[,2.6.7.4) [2.7.0,2.9.10.4)
H Deserialization of Untrusted Data	[,2.6.7.4) [2.7.0,2.9.10.4)
H Deserialization of Untrusted Data	[,2.6.7.4) [2.7.0,2.9.10.4)
H Deserialization of Untrusted Data	[,2.6.7.4) [2.7.0,2.9.10.4)
H Deserialization of Untrusted Data	[2.0.0,2.6.7.4) [2.7.0,2.7.9.7) [2.8.0,2.8.11.6) [2.9.0,2.9.10.4)
H Deserialization of Untrusted Data	[2.0.0,2.6.7.4) [2.7.0,2.9.10.4)
H Deserialization of Untrusted Data	[2.0.0,2.6.7.4) [2.7.0,2.9.10.4)
H Deserialization of Untrusted Data	[2.0.0,2.6.7.4) [2.7.0,2.9.10.4)
H Deserialization of Untrusted Data	[,2.6.7.3) [2.8.0,2.8.11.5) [2.9.0,2.9.10.3)
H Deserialization of Untrusted Data	[,2.6.7.4) [2.7.0,2.7.9.7) [2.8.0,2.8.11.6) [2.9.0,2.9.10.4)
H Deserialization of Untrusted Data	[,2.6.7.4) [2.7.0,2.7.9.7) [2.8.0,2.8.11.5) [2.9.0,2.9.10.3)
H Deserialization of Untrusted Data	[,2.9.10.2)
H Deserialization of Untrusted Data	[2.0.0,2.9.10.1)
H Deserialization of Untrusted Data	[,2.9.10)
H Deserialization of Untrusted Data	[2.9.0,2.9.10.1) [2.7.0,2.8.11.5) [,2.6.7.3)
H Deserialization of Untrusted Data	[2.9.0,2.9.10.1) [2.7.0,2.8.11.5) [,2.6.7.3)
H Deserialization of Untrusted Data	[2.9.0,2.9.10) [2.7.0,2.8.11.5) [,2.6.7.3)
H Deserialization of Untrusted Data	[2.9.0,2.9.10) [2.7.0,2.8.11.5) [,2.6.7.3)
H Deserialization of Untrusted Data	[2.9.0,2.9.10) [2.7.0,2.8.11.5) [,2.6.7.3)
H Deserialization of Untrusted Data	[2.9.0,2.9.9.2) [2.8.0,2.8.11.4) [,2.7.9.6)
H Deserialization of Untrusted Data	[2.9.0,2.9.9.2) [2.8.0,2.8.11.4) [,2.7.9.6)
H Deserialization of Untrusted Data	[2.9.0,2.9.9.1) [2.8.0,2.8.11.4) [,2.7.9.6)
M Deserialization of Untrusted Data	[2.9.0,2.9.9.1) [2.8.0,2.8.11.4) [,2.7.9.6)
H Deserialization of Untrusted Data	[2.9.0,2.9.9) [2.8.0,2.8.11.4) [2.7.0,2.7.9.6) [,2.6.7.3)
H Deserialization of Untrusted Data	[,2.6.7.3) [2.7.0,2.7.9.5) [2.8.0,2.8.11.3) [2.9.0,2.9.8)
H Deserialization of Untrusted Data	[,2.6.7.3) [2.7.0,2.7.9.5) [2.8.0,2.8.11.3) [2.9.0,2.9.8)
H Deserialization of Untrusted Data	[,2.6.7.3) [2.7.0,2.7.9.5) [2.8.0,2.8.11.3) [2.9.0,2.9.8)
H Deserialization of Untrusted Data	[,2.6.7.3) [2.7.0,2.7.9.5) [2.8.0,2.8.11.3) [2.9.0,2.9.7)
H Deserialization of Untrusted Data	[,2.6.7.3) [2.7.0,2.7.9.5) [2.8.0,2.8.11.3) [2.9.0,2.9.7)
H Deserialization of Untrusted Data	[,2.6.7.3) [2.7.0,2.7.9.5) [2.8.0,2.8.11.3) [2.9.0,2.9.7)
H Deserialization of Untrusted Data	[,2.6.7.3) [2.7.0,2.7.9.5) [2.8.0,2.8.11.3) [2.9.0,2.9.7)
H Deserialization of Untrusted Data	[,2.6.7.3) [2.7.0,2.7.9.4) [2.8.0,2.8.11.2) [2.9.0,2.9.6)
H Deserialization of Untrusted Data	[,2.6.7.3) [2.7.0,2.7.9.4) [2.8.0,2.8.11.2) [2.9.0,2.9.5)
H Deserialization of Untrusted Data	[,2.6.7.3) [2.7.0,2.7.9.4) [2.8.0,2.8.11.2) [2.9.0,2.9.6)
H Deserialization of Untrusted Data	[,2.6.7.5) [2.7.0,2.8.11.1) [2.9.0,2.9.5)
H Deserialization of Untrusted Data	[,2.8.11) [2.9.0,2.9.4)
H Deserialization of Untrusted Data	[,2.8.11) [2.9.0,2.9.4)
H Deserialization of Untrusted Data	[,2.6.7.1) [2.7.0,2.7.9.1) [2.8.0,2.8.10)
H Deserialization of Untrusted Data	[,2.6.7.1) [2.7.0,2.7.9.1) [2.8.0,2.8.9)

Package versions

1 - 100 of 201 Results

version	published	direct vulnerabilities
2.18.0	27 Sep, 2024	0 C 0 H 0 M 0 L
2.18.0-rc1	30 Aug, 2024	0 C 0 H 0 M 0 L
2.17.2	5 Jul, 2024	0 C 0 H 0 M 0 L
2.17.1	5 May, 2024	0 C 0 H 0 M 0 L
2.17.0	12 Mar, 2024	0 C 0 H 0 M 0 L
2.17.0-rc1	27 Feb, 2024	0 C 0 H 0 M 0 L
2.16.2	9 Mar, 2024	0 C 0 H 0 M 0 L
2.16.1	24 Dec, 2023	0 C 0 H 0 M 0 L
2.16.0	15 Nov, 2023	0 C 0 H 0 M 0 L
2.16.0-rc1	20 Oct, 2023	0 C 0 H 0 M 0 L
2.15.4	15 Feb, 2024	0 C 0 H 0 M 0 L
2.15.3	13 Oct, 2023	0 C 0 H 0 M 0 L
2.15.2	30 May, 2023	0 C 0 H 0 M 0 L
2.15.1	16 May, 2023	0 C 0 H 0 M 0 L
2.15.0	23 Apr, 2023	0 C 0 H 0 M 0 L
2.15.0-rc3	14 Apr, 2023	0 C 0 H 0 M 0 L
2.15.0-rc2	28 Mar, 2023	0 C 0 H 0 M 0 L
2.15.0-rc1	18 Mar, 2023	0 C 0 H 0 M 0 L
2.14.3	5 May, 2023	0 C 0 H 0 M 0 L
2.14.2	29 Jan, 2023	0 C 0 H 0 M 0 L
2.14.1	21 Nov, 2022	0 C 0 H 0 M 0 L
2.14.0	5 Nov, 2022	0 C 0 H 0 M 0 L
2.14.0-rc3	28 Oct, 2022	0 C 0 H 0 M 0 L
2.14.0-rc2	10 Oct, 2022	0 C 0 H 0 M 0 L
2.14.0-rc1	25 Sep, 2022	0 C 0 H 0 M 0 L
2.13.5	23 Jan, 2023	0 C 0 H 0 M 0 L
2.13.4.2	13 Oct, 2022	0 C 0 H 0 M 0 L
2.13.4.1	12 Oct, 2022	0 C 0 H 0 M 0 L
2.13.4	3 Sep, 2022	0 C 0 H 1 M 0 L
2.13.3	14 May, 2022	0 C 0 H 2 M 0 L
2.13.2.2	29 Mar, 2022	0 C 0 H 2 M 0 L
2.13.2.1	25 Mar, 2022	0 C 0 H 2 M 0 L
2.13.2	6 Mar, 2022	0 C 1 H 2 M 0 L
2.13.1	19 Dec, 2021	0 C 1 H 2 M 0 L
2.13.0	30 Sep, 2021	0 C 1 H 3 M 0 L
2.13.0-rc2	27 Aug, 2021	0 C 0 H 0 M 0 L
2.13.0-rc1	14 Jul, 2021	0 C 0 H 0 M 0 L
2.12.7.2	2 May, 2024	0 C 0 H 0 M 0 L
2.12.7.1	13 Oct, 2022	0 C 0 H 0 M 0 L
2.12.7	26 May, 2022	0 C 0 H 2 M 0 L
2.12.6.1	27 Mar, 2022	0 C 0 H 2 M 0 L
2.12.6	15 Dec, 2021	0 C 1 H 2 M 0 L
2.12.5	27 Aug, 2021	0 C 1 H 3 M 0 L
2.12.4	6 Jul, 2021	0 C 1 H 3 M 0 L
2.12.3	12 Apr, 2021	0 C 1 H 3 M 0 L
2.12.2	3 Mar, 2021	0 C 1 H 3 M 0 L
2.12.1	9 Jan, 2021	0 C 1 H 3 M 0 L
2.12.0	29 Nov, 2020	0 C 1 H 3 M 0 L
2.12.0-rc2	15 Nov, 2020	0 C 1 H 3 M 0 L
2.12.0-rc1	12 Oct, 2020	0 C 1 H 3 M 0 L
2.11.4	12 Dec, 2020	0 C 1 H 3 M 0 L
2.11.3	1 Oct, 2020	0 C 1 H 3 M 0 L
2.11.2	2 Aug, 2020	0 C 1 H 3 M 0 L
2.11.1	25 Jun, 2020	0 C 1 H 3 M 0 L
2.11.0	26 Apr, 2020	0 C 1 H 3 M 0 L
2.11.0.rc1	24 Mar, 2020	0 C 1 H 3 M 0 L
2.10.5.1	2 Dec, 2020	0 C 1 H 3 M 0 L
2.10.5	21 Jul, 2020	0 C 2 H 3 M 0 L
2.10.4	2 May, 2020	0 C 2 H 3 M 0 L
2.10.3	3 Mar, 2020	0 C 2 H 3 M 0 L
2.10.2	5 Jan, 2020	0 C 2 H 3 M 0 L
2.10.1	9 Nov, 2019	0 C 2 H 3 M 0 L
2.10.0.pr3	17 Sep, 2019	0 C 2 H 3 M 0 L
2.10.0.pr2	31 Aug, 2019	0 C 2 H 3 M 0 L
2.10.0.pr1	19 Jul, 2019	0 C 2 H 3 M 0 L
2.10.0	26 Sep, 2019	0 C 2 H 2 M 0 L
2.9.10.8	6 Jan, 2021	0 C 1 H 2 M 0 L
2.9.10.7	2 Dec, 2020	0 C 15 H 2 M 0 L
2.9.10.6	24 Aug, 2020	0 C 17 H 2 M 0 L
2.9.10.5	22 Jun, 2020	0 C 19 H 2 M 0 L
2.9.10.4	11 Apr, 2020	0 C 23 H 2 M 0 L
2.9.10.3	23 Feb, 2020	0 C 34 H 2 M 0 L
2.9.10.2	3 Jan, 2020	0 C 36 H 2 M 0 L
2.9.10.1	19 Oct, 2019	0 C 37 H 2 M 0 L
2.9.10	21 Sep, 2019	0 C 40 H 2 M 0 L
2.9.9.3	6 Aug, 2019	0 C 44 H 2 M 0 L
2.9.9.2	27 Jul, 2019	0 C 44 H 2 M 0 L
2.9.9.1	3 Jul, 2019	0 C 46 H 2 M 0 L
2.9.9	16 May, 2019	0 C 47 H 3 M 0 L
2.9.8	15 Dec, 2018	0 C 48 H 3 M 0 L
2.9.7	19 Sep, 2018	0 C 51 H 3 M 0 L
2.9.6	12 Jun, 2018	0 C 55 H 3 M 0 L
2.9.5	26 Mar, 2018	0 C 57 H 3 M 0 L
2.9.4	24 Jan, 2018	0 C 59 H 3 M 0 L
2.9.3	9 Dec, 2017	0 C 61 H 3 M 0 L
2.9.2	14 Oct, 2017	0 C 61 H 3 M 0 L
2.9.1	8 Sep, 2017	0 C 61 H 3 M 0 L
2.9.0.pr4	17 Jun, 2017	0 C 61 H 3 M 0 L
2.9.0.pr3	25 Apr, 2017	0 C 61 H 3 M 0 L
2.9.0.pr2	22 Mar, 2017	0 C 61 H 3 M 0 L
2.9.0.pr1	2 Mar, 2017	0 C 61 H 3 M 0 L
2.9.0	30 Jul, 2017	0 C 61 H 3 M 0 L
2.8.11.6	10 Mar, 2020	0 C 34 H 2 M 0 L
2.8.11.5	10 Feb, 2020	0 C 36 H 2 M 0 L
2.8.11.4	26 Jul, 2019	0 C 43 H 2 M 0 L
2.8.11.3	23 Nov, 2018	0 C 47 H 3 M 0 L
2.8.11.2	8 Jun, 2018	0 C 54 H 3 M 0 L
2.8.11.1	11 Feb, 2018	0 C 57 H 3 M 0 L
2.8.11	24 Dec, 2017	0 C 58 H 3 M 0 L
2.8.10	24 Aug, 2017	0 C 60 H 3 M 0 L

See all versions

com.fasterxml.jackson.core:jackson-databind vulnerabilities

latest version

latest non vulnerable version

first published

latest version published

licenses detected

package manager

Direct Vulnerabilities

Package versions