fasterxml Vulnerability Advisory Catalog

Total 79 security vulnerabilities recorded for fasterxml software and firmware.

← Back to All Vendors
Component: jackson-databind

jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor. From 2.21.0 until 2.21.4 and 3.1.4...

📅 2026-06-23
CVSS 6.5 Dossier →
Component: jackson-databind

jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor. From 2.21.0 until 2.21.4 and 3.1.4...

📅 2026-06-23
CVSS 5.3 Dossier →
Component: jackson-databind

jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor. From 2.21.0 until 2.21.4 and 3.1.4...

📅 2026-06-23
CVSS 5.3 Dossier →
Component: jackson-databind

jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor. From 2.8.0 until 2.18.9, 2.21.5, a...

📅 2026-06-23
CVSS 5.3 Dossier →
Component: jackson-databind

jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor. From 2.0.0 until 2.18.8, 2.21.4, a...

📅 2026-06-23
CVSS 5.3 Dossier →
Component: jackson-databind

jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor. From 2.10.0 until 2.18.8, 2.21.4, ...

📅 2026-06-23
CVSS 8.1 Dossier →
Component: jackson-databind

jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor. From 2.10.0 until 2.18.8, 2.21.4, ...

📅 2026-06-23
CVSS 8.1 Dossier →
Component: jackson-databind

jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor. From 2.13.0 until 2.14.0, a potent...

📅 2026-06-23
CVSS 7.5 Dossier →
Component: jackson-core

jackson-core contains core low-level incremental ("streaming") parser and generator abstractions used by Jackson Data Processor. From version 3.0.0 to...

📅 2026-03-06
CVSS 7.5 Dossier →
CVE-2023-3894 MEDIUM
Component: jackson-dataformats-text

Those using jackson-dataformats-text to parse TOML data may be vulnerable to Denial of Service attacks (DOS). If the parser is running on user supplie...

📅 2023-08-08
CVSS 5.8 Dossier →
Component: jackson-databind

jackson-databind through 2.15.2 allows attackers to cause a denial of service or other unspecified impact via a crafted object that uses cyclic depend...

📅 2023-06-14
CVSS 4.7 Dossier →
Component: jackson-databind

jackson-databind 2.10.x through 2.12.x before 2.12.6 and 2.13.x before 2.13.1 allows attackers to cause a denial of service (2 GB transient heap usage...

📅 2023-03-18
CVSS 7.5 Dossier →
Component: jackson-databind

In FasterXML jackson-databind before 2.13.4, resource exhaustion can occur because of a lack of a check in BeanDeserializer._deserializeFromArray to p...

📅 2022-10-02
CVSS 7.5 Dossier →
Component: jackson-databind

In FasterXML jackson-databind before versions 2.13.4.1 and 2.12.17.1, resource exhaustion can occur because of a lack of a check in primitive value de...

📅 2022-10-02
CVSS 7.5 Dossier →
Component: jackson-databind

jackson-databind before 2.13.0 allows a Java StackOverflow exception and denial of service via a large depth of nested objects....

📅 2022-03-11
CVSS 7.5 Dossier →
Component: jackson-dataformats-binary

This affects the package com.fasterxml.jackson.dataformat:jackson-dataformat-cbor from 0 and before 2.11.4, from 2.12.0-rc1 and before 2.12.1. Uncheck...

📅 2021-02-18
CVSS 7.5 Dossier →
Component: jackson-databind

A flaw was found in jackson-databind before 2.9.10.7. FasterXML mishandles the interaction between serialization gadgets and typing. The highest threa...

📅 2021-01-19
CVSS 8.1 Dossier →
Component: jackson-databind

FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to org.docx4j.org.apache.x...

📅 2021-01-07
CVSS 8.1 Dossier →
Component: jackson-databind

FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp....

📅 2021-01-07
CVSS 8.1 Dossier →
Component: jackson-databind

FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to com.newrelic.agent.deps...

📅 2021-01-06
CVSS 8.1 Dossier →
Component: jackson-databind

FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to com.newrelic.agent.deps...

📅 2021-01-06
CVSS 8.1 Dossier →
Component: jackson-databind

FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp....

📅 2021-01-06
CVSS 8.1 Dossier →
Component: jackson-databind

FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp....

📅 2021-01-06
CVSS 8.1 Dossier →
Component: jackson-databind

FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp....

📅 2021-01-06
CVSS 8.1 Dossier →
Page 1 of 4 (79 Total Records)