Let's Patch It!

Book a short call with one our specialists, we'll walk you through how Endor Patches work, and ask you a few questions about your environment (like your primary programming languages and repository management). We'll also send you an email right after you fill out the form, feel free to reply with any questions you have in advance!

Patch

com.fasterxml.jackson.core:jackson-databind 2.9.0

Ecosystem

maven

Release Date

December 10, 2024

LINES OF CODE CHANGED

+1133

–181

on latest patch

CVEs Fixed

CVE ID

CVE Name

Severity

jackson-databind mishandles the interaction between serialization gadgets and typing

Deserialization of Untrusted Data in jackson-databind

Server-Side Request Forgery (SSRF) in jackson-databind

jackson-databind polymorphic typing issue

Unsafe Deserialization in jackson-databind

Unsafe Deserialization in jackson-databind

jackson-databind Deserialization of Untrusted Data vulnerability

Unsafe Deserialization in jackson-databind

Deserialization of untrusted data in Jackson Databind

Arbitrary Code Execution in jackson-databind

Deserialization of untrusted data in Jackson Databind

jackson-databind mishandles the interaction between serialization gadgets and typing

Unsafe Deserialization in jackson-databind

Unsafe Deserialization in jackson-databind

Deserialization of Untrusted Data

Unsafe Deserialization in jackson-databind

jackson-databind mishandles the interaction between serialization gadgets and typing

jackson-databind mishandles the interaction between serialization gadgets and typing

Deserialization of untrusted data in Jackson Databind

XML External Entity (XXE) Injection in Jackson Databind

jackson-databind mishandles the interaction between serialization gadgets and typing

jackson-databind mishandles the interaction between serialization gadgets and typing

Polymorphic deserialization of malicious object in jackson-databind

Serialization gadget exploit in jackson-databind

jackson-databind mishandles the interaction between serialization gadgets and typing

Deserialization of Untrusted Data in jackson-databind

jackson-databind mishandles the interaction between serialization gadgets and typing

Unsafe Deserialization in jackson-databind

Deeply nested json in jackson-databind

Deserialization of Untrusted Data in jackson-databind

Unsafe Deserialization in jackson-databind

Deserialization of Untrusted Data in jackson-databind due to polymorphic deserialization

Deserialization of untrusted data in FasterXML jackson-databind

Deserialization of untrusted data in jackson-databind

Improper Input Validation in jackson-databind

Polymorphic deserialization of malicious object in jackson-databind

jackson-databind mishandles the interaction between serialization gadgets and typing

Unsafe Deserialization in jackson-databind

Deserialization of untrusted data in Jackson Databind

FasterXML jackson-databind allows unauthenticated remote code execution

Polymorphic Typing issue in FasterXML jackson-databind

jackson-databind polymorphic typing issue

Uncontrolled Resource Consumption in FasterXML jackson-databind

Deserialization of Untrusted Data in jackson-databind

Code Injection in jackson-databind

Unsafe Deserialization in jackson-databind

jackson-databind mishandles the interaction between serialization gadgets and typing

Polymorphic Typing issue in FasterXML jackson-databind

Arbitrary Code Execution in jackson-databind

jackson-databind mishandles the interaction between serialization gadgets and typing

com.fasterxml.jackson.core:jackson-databind vulnerable to Deserialization of Untrusted Data

Uncontrolled Resource Consumption in Jackson-databind

Serialization gadgets exploit in jackson-databind

jackson-databind mishandles the interaction between serialization gadgets and typing

XML External Entity Reference (XXE) in jackson-databind

jackson-databind vulnerable to unsafe deserialization

Deserialization of Untrusted Data in jackson-databind

Polymorphic Typing in FasterXML jackson-databind

jackson-databind vulnerable to remote code execution due to incorrect deserialization and blocklist bypass

Unsafe Deserialization in jackson-databind

Serialization gadgets exploit in jackson-databind

Information exposure in FasterXML jackson-databind

Deserialization of untrusted data in FasterXML jackson-databind

Unsafe Deserialization in jackson-databind

Versions of com.fasterxml.jackson.core:jackson-databind

Version

CVEs Fixed

Lines of Code Changed

Lines of Code Changed

Lines of Code Changed

Lines of Code Changed

Lines of Code Changed

Lines of Code Changed

Lines of Code Changed

Lines of Code Changed

Lines of Code Changed

Lines of Code Changed

Lines of Code Changed

Lines of Code Changed

Lines of Code Changed

Lines of Code Changed

Lines of Code Changed

Lines of Code Changed

Lines of Code Changed

Lines of Code Changed

Lines of Code Changed

Lines of Code Changed

Lines of Code Changed

Lines of Code Changed

Lines of Code Changed

Lines of Code Changed

Lines of Code Changed

Lines of Code Changed

Lines of Code Changed

Lines of Code Changed

Lines of Code Changed

Lines of Code Changed

Lines of Code Changed

Lines of Code Changed

Lines of Code Changed

Lines of Code Changed

Lines of Code Changed

Lines of Code Changed

Lines of Code Changed

Lines of Code Changed

Lines of Code Changed

Lines of Code Changed

Lines of Code Changed

Lines of Code Changed

Lines of Code Changed

Lines of Code Changed

Lines of Code Changed

Lines of Code Changed

Lines of Code Changed

Lines of Code Changed

Lines of Code Changed

Lines of Code Changed

Lines of Code Changed

Lines of Code Changed

Lines of Code Changed

Lines of Code Changed

Lines of Code Changed

Lines of Code Changed

Lines of Code Changed

Lines of Code Changed

Lines of Code Changed

Lines of Code Changed

Lines of Code Changed

Lines of Code Changed

Lines of Code Changed

Lines of Code Changed

Lines of Code Changed

Lines of Code Changed

Lines of Code Changed

Lines of Code Changed

Lines of Code Changed

Lines of Code Changed

Lines of Code Changed

Lines of Code Changed

Lines of Code Changed

Lines of Code Changed

Lines of Code Changed

Lines of Code Changed

Lines of Code Changed

Lines of Code Changed

Lines of Code Changed

Lines of Code Changed

Lines of Code Changed

Lines of Code Changed

Lines of Code Changed

Lines of Code Changed

Lines of Code Changed

Lines of Code Changed

Lines of Code Changed

Lines of Code Changed

Lines of Code Changed

Lines of Code Changed

Lines of Code Changed

Lines of Code Changed

Lines of Code Changed

Lines of Code Changed

Lines of Code Changed

Lines of Code Changed

Lines of Code Changed

Lines of Code Changed

Lines of Code Changed

Lines of Code Changed

Lines of Code Changed