Entrar Obtener clave API

Vulnerabilidades de FasterXML com.fasterxml.jackson.core:jackson-databind (CVE)

Registros CVE publicados para FasterXML com.fasterxml.jackson.core:jackson-databind, los más recientes primero. Siga el producto para recibir un correo con cada nueva.

1 resultados

5.3Media

CVE-2026-77310 hace 2 meses

jackson-databind: Eager DNS resolution (SSRF) still present in InetAddress deserialization (Incomplete fix for CVE-2026-54514)

FasterXML com.fasterxml.jackson.core:jackson-databind; FasterXML tools.jackson.core:jackson-databind

jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor. Prior to versions 2.18.9, 2.21.5, 2.22.1, 3.1.5, and 3.2.1 on their respective release lines, the java.net.InetAddress branch of FromStringDese…