Packages / openSUSE Tumbleweed / Source / Unspecified / jackson-databind
General data-binding package for Jackson (2.x)
Javadoc for jackson-databind
Die Paketzuordnung läuft.
| CVE | Schweregrad | Betroffene Versionen |
|---|---|---|
| [CVE-2026-19032] Published: jackson-databind's deserializer for java.nio.file.Path resolves an attacker-supplied URI without restricting the URI scheme. In JDKFromStringDeserializer.NioPathHelper.deserialize, a string bound from | Medium(5.3) | UnbekanntDetails (2)
|
| [CVE-2026-68497] Published: jackson-databind binds a JSON string to a javax.xml.datatype.Duration or javax.xml.datatype.XMLGregorianCalendar field by passing the raw string verbatim to DatatypeFactory.newDuration(value) or newXM | High(7.5) | UnbekanntDetails (2)
|
| [CVE-2026-59888] Published: jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor. From 2.15.0 until 2.18.8, 2.21.4, and 3.1.4, Java Records using a PropertyNamingStra | Medium(6.5) | UnbekanntDetails (2)
|
| [CVE-2026-54512] Published: jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor. From 2.10.0 until 2.18.8, 2.21.4, and 3.1.4, jackson-databind's PolymorphicTypeValid | High(8.1) | UnbekanntDetails (2)
|
| [CVE-2026-54513] Published: jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor. From 2.10.0 until 2.18.8, 2.21.4, and 3.1.4, BasicPolymorphicTypeValidator.Builder.a | High(8.1) | UnbekanntDetails (2)
|
| [CVE-2026-54515] Published: jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor. From 2.8.0 until 2.18.9, 2.21.5, and 3.1.4, in BeanDeserializerBase.createContextual | Medium(5.3) | UnbekanntDetails (2)
|
Zuletzt synchronisiert:
Authoritative source; repository metadata signature verified
tumbleweed-oss-multiarch:4db10cdde3ad82c7e22be35753c9e164b4bdd30f92db4aee17a0d4c94c5f902f