Alta
CVE-2026-91777
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 86
Restablecer filtros
Alta
CVE-2026-91776
jackson-databind retains every unknown raw type ID
Media
CVE-2026-83557
jackson-databind: Comparable missing from DefaultBaseTypeLimitingValidator's unsafe base types (incomplete PolymorphicTypeValidator denylist)
Alta
CVE-2026-68497
jackson-databind: Duration XMLGregorianCalendar Unbounded Number Parse DoS
Media
CVE-2026-19032
jackson-databind: Path Deserialization Missing Scheme Allowlist for FileSystemProvider Resolution
Media
CVE-2026-77310
jackson-databind: Incomplete fix for CVE-2026-54514: eager DNS resolution (SSRF) still present in InetAddress deserialization
Media
CVE-2026-59889
jackson-databind: @JsonView bypassed for @JsonUnwrapped container properties on deserialization
Media
ghsa-mhm7-754m-9p8w
jackson-databind: `@JsonView` bypass for creator properties with `@JsonTypeInfo(include=As.EXTERNAL_PROPERTY)`
Media
CVE-2026-59888
jackson-databind: @JsonIgnore on a Record property is bypassed with a PropertyNamingStrategy
Media
CVE-2026-54517
jackson-databind has @JsonView bypass for setterless creator properties
Media
CVE-2026-54516
jackson-databind's renamed @JsonIgnore'd setters can deserialize via private fields
Media
CVE-2026-54515
jackson-databind has case-insensitive deserialization bypasses per-property @JsonIgnoreProperties
Media
CVE-2026-54514
jackson-databind: InetSocketAddress deserialization triggers eager DNS resolution (SSRF)
Alta
CVE-2026-54513
jackson-databind has an array subtype allowlist bypass in BasicPolymorphicTypeValidator (allowIfSubTypeIsArray)
Alta
CVE-2026-54512
jackson-databind has a PolymorphicTypeValidator bypass via generic type parameters that allows arbitrary class instantiation
Media
CVE-2026-50193
jackson-databind: Deeply nested JsonNode throws StackOverflowError for toString()
Media
CVE-2026-54518
jackson-databind has a @JsonView bypass for unwrapped creator parameters
Alta
CVE-2021-46877
jackson-databind possible Denial of Service if using JDK serialization to serialize JsonNode
Alta
CVE-2022-42003
Uncontrolled Resource Consumption in Jackson-databind
Alta
CVE-2022-42004
Uncontrolled Resource Consumption in FasterXML jackson-databind
Alta
CVE-2020-10650
jackson-databind vulnerable to unsafe deserialization
Alta
CVE-2020-36518
Deeply nested json in jackson-databind
Alta
CVE-2020-36189
Unsafe Deserialization in jackson-databind
Alta
CVE-2020-36187
Unsafe Deserialization in jackson-databind
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.