Known vulnerabilities in jackson-databind

Vendor: FasterXML
Software CPE: cpe:2.3:a:fasterxml:jackson-databind:*:*:*:*:*:*:*:*
Total vulnerabilities: 75
Public exploits: 13
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting jackson-databind jackson-databind is affected by 75 known vulnerabilities: 48 high, 22 medium, 5 low Critical High Medium Low

Vulnerabilities (75)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU139159 - Deserialization of Untrusted Data
CVE-2026-54512
CWE-502 High
No
No
2.18.8, 2.21.4, 3.1.4 22.07.2026 SB2026072278
SB2026072282
SB2026072283
and 16 more
#VU139158 - Incomplete List of Disallowed Inputs
CVE-2026-54513
CWE-184 High
No
No
2.18.8, 2.21.4, 3.1.4 22.07.2026 SB2026072278
SB2026072282
SB2026072283
and 18 more
#VU139157 - Server-Side Request Forgery (SSRF)
CVE-2026-54514
CWE-918 Medium
No
No
2.18.8, 2.21.4, 3.1.4 22.07.2026 SB2026072278
SB2026072288
SB2026072340
and 6 more
#VU139156 - Improperly Controlled Modification of Dynamically-Determined Object Attributes
CVE-2026-54515
CWE-915 Medium
No
No
2.18.9, 2.21.5, 2.22.1, 3.1.4 22.07.2026 SB2026072278
SB2026072282
SB2026072288
and 8 more
#VU139155 - Improperly Controlled Modification of Dynamically-Determined Object Attributes
CVE-2026-54516
CWE-915 Medium
No
No
2.21.4, 3.1.4 22.07.2026 SB2026072278
SB2026072282
SB2026072340
and 3 more
#VU139154 - Incorrect Authorization
CVE-2026-54517
CWE-863 Medium
No
No
2.21.4, 3.1.4 22.07.2026 SB2026072278
SB2026072282
SB2026072340
and 3 more
#VU139153 - Incorrect Authorization
CVE-2026-54518
CWE-863 Medium
No
No
2.21.4, 3.1.4 22.07.2026 SB2026072278
SB2026072282
SB2026072340
and 3 more
#VU139152 - Improperly Controlled Modification of Dynamically-Determined Object Attributes
CVE-2026-59888
CWE-915 Medium
No
No
2.18.8, 2.21.4, 3.1.4 22.07.2026 SB2026072278
SB2026072413
SB20260728138
and 2 more
#VU139151 - Incorrect Authorization
CVE-2026-59889
CWE-863 Low
No
No
2.18.9, 2.21.5, 2.22.1, 3.1.5, 3.2.1 22.07.2026 SB2026072278
SB2026072413
SB20260728138
and 2 more
#VU139150 - Incorrect Authorization
CWE-863 Medium
No
No
2.18.9, 2.20.0, 2.21.0, 2.21.5 22.07.2026 SB2026072278
#VU68832 - Resource exhaustion
CVE-2022-42004
CWE-400 Medium
No
No
2.13.4 31.10.2022 SB2022103116
SB2022103117
SB2022111404
and 122 more
#VU68635 - Deserialization of Untrusted Data
CVE-2022-42003
CWE-502 Medium
No
No
2.12.7.1, 2.13.4.2, 2.14.0 rc1 25.10.2022 SB2022102509
SB2022102510
SB2022103117
and 208 more
#VU61799 - Out-of-bounds write
CVE-2020-36518
CWE-787 Medium
No
No
2.12.6.1, 2.13.2.1 01.04.2022 SB2022040113
SB2022040114
SB2022040115
and 147 more
#VU59148 - Deserialization of Untrusted Data
CVE-2021-46877
CWE-502 Medium
No
No
2.12.6, 2.13.1 03.01.2022 SB2022010326
SB2022010327
SB2022062734
and 37 more
#VU49967 - Deserialization of Untrusted Data
CVE-2021-20190
CWE-502 High
No
No
2.9.10.7 19.01.2021 SB2021012514
SB2021042826
SB2021050708
and 17 more
#VU49371 - Deserialization of Untrusted Data
CVE-2020-36183
CWE-502 High
No
No
2.9.10.8 07.01.2021 SB2021011105
SB2021042826
SB2021050708
and 15 more
#VU49367 - Deserialization of Untrusted Data
CVE-2020-36188
CWE-502 High
Available
No
2.9.10.8 07.01.2021 SB2021011105
SB2021042826
SB2021050708
and 17 more
#VU49378 - Deserialization of Untrusted Data
CVE-2020-35728
CWE-502 High
Available
No
2.9.10.8 27.12.2020 SB2021011105
SB2021042826
SB2021050708
and 15 more
#VU49379 - Deserialization of Untrusted Data
CVE-2020-35490
CWE-502 High
No
No
2.9.10.8 17.12.2020 SB2021011105
SB2021042826
SB2021050708
and 16 more
#VU49380 - Deserialization of Untrusted Data
CVE-2020-35491
CWE-502 High
No
No
2.9.10.8 17.12.2020 SB2021011105
SB2021042826
SB2021050708
and 15 more


Showing elements 1 - 20 out of 75