com.fasterxml.jackson.core:jackson-databind@2.13.2.2 vulnerabilities
-
latest version
2.18.0
-
latest non vulnerable version
-
first published
13 years ago
-
latest version published
2 months ago
-
licenses detected
- [2.1.0,2.2.0); [2.4.0-rc1,)
-
package manager
Direct Vulnerabilities
Known vulnerabilities in the com.fasterxml.jackson.core:jackson-databind package. This does not include vulnerabilities belonging to this package’s dependencies.
Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.| Vulnerability | Vulnerable Version |
|---|---|
com.fasterxml.jackson.core:jackson-databind is a library which contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor. Affected versions of this package are vulnerable to Denial of Service (DoS) in the NOTE:
For this vulnerability to be exploitable the non-default How to fix Denial of Service (DoS)? Upgrade |
[2.4.0,2.12.7.1)
[2.13.0,2.13.4)
|
com.fasterxml.jackson.core:jackson-databind is a library which contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor. Affected versions of this package are vulnerable to Denial of Service (DoS) in the NOTE: This vulnerability is only exploitable when the non-default How to fix Denial of Service (DoS)? Upgrade |
[2.4.0,2.12.7.1)
[2.13.0,2.13.4.1)
|