Known vulnerabilities in jackson-databind 2.8.11.6

Vendor: FasterXML
Version: 2.8.11.6
Software CPE: cpe:2.3:a:fasterxml:jackson-databind:*:*:*:*:*:*:*:*
Total vulnerabilities: 9
Public exploits: 2
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting jackson-databind version 2.8.11.6 jackson-databind 2.8.11.6 is affected by 9 vulnerabilities: 4 high, 5 medium Critical High Medium Low

Vulnerabilities (9)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU151565 - Resource exhaustion
CVE-2026-91776
CWE-400 Medium
No
No
2.8.11, 2.21.7, 2.22.3, 3.1.7, 3.2.3 22.09.2026 SB2026092225
#VU144596 - Server-Side Request Forgery (SSRF)
CVE-2026-77310
CWE-918 Medium
No
No
2.18.9, 2.21.1, 2.21.5, 3.1.5, 3.2.1 24.08.2026 SB2026072278
SB2026090312
SB2026091103
#VU144593 - Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection')
CVE-2026-19032
CWE-470 Medium
No
No
2.18.10, 2.21.6, 2.22.2, 3.1.6, 3.2.2 24.08.2026 SB2026082435
#VU139157 - Server-Side Request Forgery (SSRF)
CVE-2026-54514
CWE-918 Medium
No
No
2.18.8, 2.21.4, 3.1.4 22.07.2026 SB2026072278
SB2026072288
SB2026072340
and 13 more
#VU139156 - Improperly Controlled Modification of Dynamically-Determined Object Attributes
CVE-2026-54515
CWE-915 Medium
No
No
2.18.9, 2.21.5, 2.22.1, 3.1.4 22.07.2026 SB2026072278
SB2026072282
SB2026072288
and 15 more
#VU47105 - Deserialization of Untrusted Data
CVE-2020-24750
CWE-502 High
Public exploit available
No
2.9.10.6 17.09.2020 SB2020092506
SB2020100512
SB2021012013
and 28 more
#VU46305 - Improper Control of Generation of Code ('Code Injection')
CVE-2020-24616
CWE-94 High
Public exploit available
No
2.9.10.6 25.08.2020 SB2020090706
SB2022060909
SB2022101121
and 14 more
#VU27032 - Deserialization of Untrusted Data
CVE-2020-11620
CWE-502 High
No
No
2.9.10.4 20.04.2020 SB2020030909
SB2020052628
SB2020073033
and 15 more
#VU27031 - Deserialization of Untrusted Data
CVE-2020-11619
CWE-502 High
No
No
2.9.10.4 20.04.2020 SB2020030909
SB2020052628
SB2020073033
and 15 more