Поиск уязвимостей
Количество 31
Количество 31
ALT-PU-2026-4168
ALT-PU-2026-4168: package `jackson-databind` update to version 2.13.4.1-alt2
ALT-PU-2026-3730
ALT-PU-2026-3730: package `jackson-databind` update to version 2.13.4.1-alt2
CVE-2020-36518
jackson-databind before 2.13.0 allows a Java StackOverflow exception and denial of service via a large depth of nested objects.
CVE-2020-36518
jackson-databind before 2.13.0 allows a Java StackOverflow exception and denial of service via a large depth of nested objects.
CVE-2020-36518
jackson-databind before 2.13.0 allows a Java StackOverflow exception and denial of service via a large depth of nested objects.
CVE-2020-36518
jackson-databind before 2.13.0 allows a Java StackOverflow exception a ...
RLSA-2024:3061
Moderate: pki-core:10.6 and pki-deps:10.6 security update
GHSA-57j2-w4cx-62h2
Deeply nested json in jackson-databind
ELSA-2024-3061
ELSA-2024-3061: pki-core:10.6 and pki-deps:10.6 security update (MODERATE)
ELSA-2023-2312
ELSA-2023-2312: jackson security update (MODERATE)
BDU:2024-00114
Уязвимость библиотеки Jackson-databind, связанная с записью за границами буфера, позволяющая нарушителю вызвать отказ в обслуживании
SUSE-SU-2022:3995-1
Security update for jackson-databind
CVE-2021-46877
jackson-databind 2.10.x through 2.12.x before 2.12.6 and 2.13.x before 2.13.1 allows attackers to cause a denial of service (2 GB transient heap usage per read) in uncommon situations involving JsonNode JDK serialization.
CVE-2021-46877
jackson-databind 2.10.x through 2.12.x before 2.12.6 and 2.13.x before 2.13.1 allows attackers to cause a denial of service (2 GB transient heap usage per read) in uncommon situations involving JsonNode JDK serialization.
CVE-2021-46877
jackson-databind 2.10.x through 2.12.x before 2.12.6 and 2.13.x before 2.13.1 allows attackers to cause a denial of service (2 GB transient heap usage per read) in uncommon situations involving JsonNode JDK serialization.
CVE-2021-46877
jackson-databind 2.10.x through 2.12.x before 2.12.6 and 2.13.x before ...
SUSE-SU-2022:1678-1
Security update for jackson-databind, jackson-dataformats-binary, jackson-annotations, jackson-bom, jackson-core
GHSA-3x8x-79m2-3w2w
jackson-databind possible Denial of Service if using JDK serialization to serialize JsonNode
BDU:2024-00088
Уязвимость библиотеки jackson-databind, связанная с неограниченным распределением ресурсов, позволяющая нарушителю вызвать отказ в обслуживании
CVE-2022-42004
In FasterXML jackson-databind before 2.13.4, resource exhaustion can occur because of a lack of a check in BeanDeserializer._deserializeFromArray to prevent use of deeply nested arrays. An application is vulnerable only with certain customized choices for deserialization.
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
| ALT-PU-2026-4168 ALT-PU-2026-4168: package `jackson-databind` update to version 2.13.4.1-alt2 | CVSS3: 7.5 | 8 месяцев назад | |
| ALT-PU-2026-3730 ALT-PU-2026-3730: package `jackson-databind` update to version 2.13.4.1-alt2 | CVSS3: 7.5 | 8 месяцев назад | |
 | CVE-2020-36518 jackson-databind before 2.13.0 allows a Java StackOverflow exception and denial of service via a large depth of nested objects. | CVSS3: 7.5 | 5% Низкий | больше 4 лет назад |
 | CVE-2020-36518 jackson-databind before 2.13.0 allows a Java StackOverflow exception and denial of service via a large depth of nested objects. | CVSS3: 7.5 | 5% Низкий | около 6 лет назад |
 | CVE-2020-36518 jackson-databind before 2.13.0 allows a Java StackOverflow exception and denial of service via a large depth of nested objects. | CVSS3: 7.5 | 5% Низкий | больше 4 лет назад |
| CVE-2020-36518 jackson-databind before 2.13.0 allows a Java StackOverflow exception a ... | CVSS3: 7.5 | 5% Низкий | больше 4 лет назад |
 | RLSA-2024:3061 Moderate: pki-core:10.6 and pki-deps:10.6 security update | 5% Низкий | больше 2 лет назад | |
| GHSA-57j2-w4cx-62h2 Deeply nested json in jackson-databind | CVSS3: 7.5 | 5% Низкий | больше 4 лет назад |
| ELSA-2024-3061 ELSA-2024-3061: pki-core:10.6 and pki-deps:10.6 security update (MODERATE) | 5% Низкий | больше 2 лет назад | |
| ELSA-2023-2312 ELSA-2023-2312: jackson security update (MODERATE) | 5% Низкий | больше 3 лет назад | |
 | BDU:2024-00114 Уязвимость библиотеки Jackson-databind, связанная с записью за границами буфера, позволяющая нарушителю вызвать отказ в обслуживании | CVSS3: 7.5 | 5% Низкий | больше 4 лет назад |
 | SUSE-SU-2022:3995-1 Security update for jackson-databind | почти 4 года назад | ||
| CVE-2021-46877 jackson-databind 2.10.x through 2.12.x before 2.12.6 and 2.13.x before 2.13.1 allows attackers to cause a denial of service (2 GB transient heap usage per read) in uncommon situations involving JsonNode JDK serialization. | CVSS3: 7.5 | 1% Низкий | больше 3 лет назад |
| CVE-2021-46877 jackson-databind 2.10.x through 2.12.x before 2.12.6 and 2.13.x before 2.13.1 allows attackers to cause a denial of service (2 GB transient heap usage per read) in uncommon situations involving JsonNode JDK serialization. | CVSS3: 7.5 | 1% Низкий | больше 3 лет назад |
| CVE-2021-46877 jackson-databind 2.10.x through 2.12.x before 2.12.6 and 2.13.x before 2.13.1 allows attackers to cause a denial of service (2 GB transient heap usage per read) in uncommon situations involving JsonNode JDK serialization. | CVSS3: 7.5 | 1% Низкий | больше 3 лет назад |
| CVE-2021-46877 jackson-databind 2.10.x through 2.12.x before 2.12.6 and 2.13.x before ... | CVSS3: 7.5 | 1% Низкий | больше 3 лет назад |
| SUSE-SU-2022:1678-1 Security update for jackson-databind, jackson-dataformats-binary, jackson-annotations, jackson-bom, jackson-core | больше 4 лет назад | ||
| GHSA-3x8x-79m2-3w2w jackson-databind possible Denial of Service if using JDK serialization to serialize JsonNode | CVSS3: 7.5 | 1% Низкий | больше 3 лет назад |
| BDU:2024-00088 Уязвимость библиотеки jackson-databind, связанная с неограниченным распределением ресурсов, позволяющая нарушителю вызвать отказ в обслуживании | CVSS3: 7.5 | 1% Низкий | почти 5 лет назад |
| CVE-2022-42004 In FasterXML jackson-databind before 2.13.4, resource exhaustion can occur because of a lack of a check in BeanDeserializer._deserializeFromArray to prevent use of deeply nested arrays. An application is vulnerable only with certain customized choices for deserialization. | CVSS3: 7.5 | 3% Низкий | около 4 лет назад |
Уязвимостей на страницу