Homepage

Find out if you have vulnerabilities that put you at risk

Test your applications
Toggle filtering controls
Report a new vulnerability
  • H
Deserialization of Untrusted DataCVE-2018-7489
Affects com.fasterxml.jackson.core:jackson-databind | Versions [,2.6.7.5)[2.7.0, 2.8.11.1)[2.9.0, 2.9.5)
Has fix
MavenPublished 26 Feb 2018
  • H
Deserialization of Untrusted DataCVE-2018-5968
Affects com.fasterxml.jackson.core:jackson-databind | Versions [,2.8.11)[2.9.0,2.9.4)
Has fix
MavenPublished 23 Jan 2018
  • H
Deserialization of Untrusted DataCVE-2017-17485
Affects com.fasterxml.jackson.core:jackson-databind | Versions [,2.8.11)[2.9.0,2.9.4)
Has fix
MavenPublished 22 Jan 2018
  • H
Deserialization of Untrusted DataCVE-2017-15095
Affects com.fasterxml.jackson.core:jackson-databind | Versions [,2.6.7.1)[2.7.0,2.7.9.1)[2.8.0,2.8.10)
Has fix
MavenPublished 9 Nov 2017
  • H
Deserialization of Untrusted DataCVE-2017-7525
Affects com.fasterxml.jackson.core:jackson-databind | Versions [,2.6.7.1)[2.7.0,2.7.9.1)[2.8.0,2.8.9)
Has fix
MavenPublished 14 Sept 2017
  • H
Allocation of Resources Without Limits or ThrottlingCVE-2026-68495
Affects com.fasterxml.jackson.dataformat:jackson-dataformat-cbor | Versions [2.16.0,2.18.10)[2.19.0-rc2,2.21.6)[2.22.0,2.22.2)
Has fix
MavenPublished 4 Oct 2026
  • H
Denial of Service (DoS)CVE-2020-28491
Affects com.fasterxml.jackson.dataformat:jackson-dataformat-cbor | Versions [0,2.11.4)[2.12.0-rc1,2.12.1)
Has fix
MavenPublished 26 Jan 2021
  • H
Improper Input ValidationCVE-2023-3894
Affects com.fasterxml.jackson.dataformat:jackson-dataformat-properties | Versions [,2.15.0)
Has fix
MavenPublished 9 Aug 2023
  • L
Denial of Service (DoS)
Affects com.fasterxml.jackson.dataformat:jackson-dataformats-binary | Versions [0,2.12.3)
Has fix
MavenPublished 27 Apr 2021
  • H
Allocation of Resources Without Limits or ThrottlingCVE-2026-68496
Affects com.fasterxml.jackson.dataformat:jackson-dataformat-smile | Versions [2.16.0,2.18.10)[2.19.0-rc2,2.21.6)[2.22.0,2.22.2)
Has fix
MavenPublished 4 Oct 2026
  • H
Improper Input ValidationCVE-2023-3894
Affects com.fasterxml.jackson.dataformat:jackson-dataformat-toml | Versions [,2.15.0)
Has fix
MavenPublished 9 Aug 2023
  • H
Server-Side Request Forgery (SSRF)CVE-2016-7051
Affects com.fasterxml.jackson.dataformat:jackson-dataformat-xml | Versions [2.7.4,2.7.8)[2.8.0,2.8.4]
Has fix
MavenPublished 28 Mar 2017
  • C
XML External Entity (XXE) InjectionCVE-2016-3720
Affects com.fasterxml.jackson.dataformat:jackson-dataformat-xml | Versions [2.0.0,2.7.4)
Has fix
MavenPublished 28 Mar 2017
  • H
Improper Input ValidationCVE-2018-1000873
Affects com.fasterxml.jackson.datatype:jackson-datatype-jsr310 | Versions [,2.9.8)
Has fix
MavenPublished 20 Dec 2018
  • M
Unsafe Dependency Resolution
Affects com.fasterxml.jackson.module:jackson-module-scala | Versions [,2.9.9)
Has fix
MavenPublished 11 Jun 2019
  • M
Allocation of Resources Without Limits or ThrottlingCVE-2026-86513
Affects com.github.java-json-tools:jackson-coreutils | Versions [0,]
Has fix
MavenPublished 8 Sept 2026
  • H
Server-side Request Forgery (SSRF)CVE-2026-86321
Affects com.github.java-json-tools:jackson-coreutils | Versions [0,]
Has fix
MavenPublished 8 Sept 2026
  • C
Deserialization of Untrusted DataCVE-2016-8749
Affects org.apache.camel:camel-jackson | Versions [2.16.0,2.16.5)[2.17.0,2.17.5)[2.18.0,2.18.2)
Has fix
MavenPublished 25 Dec 2017
  • C
Deserialization of Untrusted DataCVE-2016-8749
Affects org.apache.camel:camel-jacksonxml | Versions [2.16.0,2.16.5)[2.17.0,2.17.5)[2.18.0,2.18.2)
Has fix
MavenPublished 4 Dec 2017
  • M
Allocation of Resources Without Limits or ThrottlingCVE-2026-91776
Affects org.codehaus.jackson:jackson-mapper-asl | Versions [0,]
Has fix
MavenPublished 23 Sept 2026
  • C
Improper Input ValidationCVE-2019-10202
Affects org.codehaus.jackson:jackson-mapper-asl | Versions [0,]
Has fix
MavenPublished 1 Mar 2023
  • H
XML External Entity (XXE) InjectionCVE-2019-10172
Affects org.codehaus.jackson:jackson-mapper-asl | Versions [0,]
Has fix
MavenPublished 19 Nov 2019
  • M
Cross-site Scripting (XSS)CVE-2016-6348
Affects org.jboss.resteasy:resteasy-jackson2-provider | Versions [,3.0.20)[3.1.0.Beta1 ,3.1.0.CR1)
Has fix
MavenPublished 5 Sept 2016
  • M
Cross-site Scripting (XSS)CVE-2016-6348
Affects org.jboss.resteasy:resteasy-jackson-provider | Versions [2.3.6.Final,]
Has fix
MavenPublished 5 Sept 2016
  • M
Denial of Service (DoS)
Affects org.json4s:json4s-jackson | Versions [,4.1.0-M2)
Has fix
MavenPublished 28 Dec 2018
  • H
Denial of Service (DoS)CVE-2026-68498
Affects tools.jackson.core:jackson-core | Versions [3.0.0,3.1.6)[3.2.0,3.2.2)
Has fix
MavenPublished 18 Oct 2026
  • M
Regular Expression Denial of Service (ReDoS)CVE-2026-89407
Affects tools.jackson.core:jackson-core | Versions [,3.1.7)[3.2.0,3.2.2)
Has fix
MavenPublished 23 Sept 2026
  • H
Allocation of Resources Without Limits or ThrottlingCVE-2026-89425
Affects tools.jackson.core:jackson-core | Versions [,3.1.7)[3.2.0,3.2.3)
Has fix
MavenPublished 23 Sept 2026
  • H
Allocation of Resources Without Limits or ThrottlingCVE-2026-68494
Affects tools.jackson.core:jackson-core | Versions [,3.1.4)
Has fix
MavenPublished 22 Jul 2026
  • H
Allocation of Resources Without Limits or Throttling
Affects tools.jackson.core:jackson-core | Versions [,3.1.1)
Has fix
MavenPublished 5 Apr 2026