Known vulnerabilities in jackson-databind (Red Hat package)
Vendor:
Red Hat Inc.
Software:
jackson-databind (Red Hat package)
Software CPE:
cpe:2.3:o:red_hat:jackson-databind_redhat_package:*:*:*:*:*:red_hat_enterprise_linux:*:*
Website:
https://www.redhat.com/en
Total vulnerabilities:
4
Public exploits:
0
Known exploited (KEV):
0
Breakdown by Severity Chart
Vulnerabilities (4)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU151566 - Resource exhaustion CVE-2026-91777 |
CWE-400 | Medium | 2.21.6-1.el9_8.1 | 22.09.2026 |
SB2026092225 SB2026101224 SB2026101332 and 4 more |
||
| #VU139159 - Deserialization of Untrusted Data CVE-2026-54512 |
CWE-502 | High | 2.21.4-1.el9_2, 2.21.4-1.el9_4, 2.21.4-1.el9_6, 2.21.4-1.el9_8 | 22.07.2026 |
SB2026072278 SB2026072282 SB2026072283 and 36 more |
||
| #VU139158 - Incomplete List of Disallowed Inputs CVE-2026-54513 |
CWE-184 | High | 2.21.4-1.el9_2, 2.21.4-1.el9_4, 2.21.4-1.el9_6, 2.21.4-1.el9_8 | 22.07.2026 |
SB2026072278 SB2026072282 SB2026072283 and 38 more |
||
| #VU61799 - Out-of-bounds write CVE-2020-36518 |
CWE-787 | Medium | 2.14.1-2.el9 | 01.04.2022 |
SB2022040113 SB2022040114 SB2022040115 and 147 more |