`com.fasterxml.jackson.core:jackson-core`

Ecosystem:
maven

Package URL:
pkg:maven/com.fasterxml.jackson.core:jackson-core

Total PRs:
5,430 Dependabot PRs

Latest PR:
about 3 hours ago

Unique Repositories:
3,258 repositories

Unique Repos (30 days):
72 repositories

Security Advisories

jackson-core can throw a StackoverflowError when processing deeply nested data

GHSA-h46c-h94j-95f3 CVE-2025-52999 HIGH published 9 months ago • updated 7 days ago

### Impact With older versions of jackson-core, if you parse an input file and it has deeply nested data, Jackson could end up throwing a Stackove...

jackson-core: Number Length Constraint Bypass in Async Parser Leads to Potential DoS Condition

GHSA-72hv-8253-57qq HIGH published 11 days ago • updated 7 days ago

### Summary The non-blocking (async) JSON parser in `jackson-core` bypasses the `maxNumberLength` constraint (default: 1000 characters) defined in ...

2.17.2 → 2.18.6 Minor PR

Open about 3 hours ago 22 comments

chore(deps): bump the maven group across 2 directories with 2 updates

TruvetaPublic/OpenToken #273

2.17.2 → 2.18.6 Minor PR

Open 1 day ago 22 comments

Bump com.fasterxml.jackson.core:jackson-core from 2.20.1 to 2.21.1

liliancavalet/json-plus-yaml #88

2.20.1 → 2.21.1 Minor PR

Open 6 days ago 1 comment

Bump the maven group across 56 directories with 30 updates

Centaurioun/tutorials #1325

2.15.2 → 2.18.6 Minor PR

Closed 6 days ago 1 comment

Bump com.fasterxml.jackson.core:jackson-core from 2.15.0 to 2.18.6

apache/incubator-gluten #11694

2.15.0 → 2.18.6 Minor PR

Closed 7 days ago 3 comments

Bump com.fasterxml.jackson.core:jackson-core from 2.21.0 to 2.21.1 in the gradle group across 1 directory

govuk-one-login/ipv-stubs #2003

2.21.0 → 2.21.1 Patch PR

Open 8 days ago 1 comment

Bump com.fasterxml.jackson.core:jackson-core from 2.19.0 to 2.21.1

swagger-api/swagger-parser #2282

2.19.0 → 2.21.1 Minor PR

Closed 8 days ago 1 comment

chore(deps): bump the maven group across 1 directory with 2 updates

AKJUS/twilio-java #12

2.15.0 → 2.18.6 Minor PR

Open 8 days ago 1 comment

build(deps): bump the fasterxml group with 3 updates

DSpace/DSpace #12061

2.21.0 → 2.21.1 Patch PR

Closed 8 days ago 1 comment

Bump com.fasterxml.jackson.core:jackson-core from 2.14.0 to 2.18.6 in /extract-task-validation

asit-asso/extract #398

2.14.0 → 2.18.6 Minor PR

Closed 9 days ago 1 comment

chore(deps): bump com.fasterxml.jackson.core:jackson-core from 2.19.0 to 2.21.1 in the maven group across 1 directory

google/adk-java #932

2.19.0 → 2.21.1 Minor PR

Open 9 days ago 1 comment

Bump com.fasterxml.jackson.core:jackson-core from 2.9.8 to 2.18.6

Cognia-TestLab/java-sec-code #20

2.9.8 → 2.18.6 Minor PR

Open 9 days ago 1 comment

chore(deps): Bump com.fasterxml.jackson.core:jackson-core from 2.17.3 to 2.18.6 in the maven group across 1 directory

CMSgov/qpp-conversion-tool #1612

2.17.3 → 2.18.6 Minor PR

Open 9 days ago 1 comment

Bump com.fasterxml.jackson.core:jackson-core from 2.17.2 to 2.18.6 in /jdbc-v2

ClickHouse/clickhouse-java #2767

2.17.2 → 2.18.6 Minor PR

Open 9 days ago 4 comments

chore(deps): bump the maven group across 2 directories with 1 update

seanmobrien/we-dont-need-no-education #394

2.17.2 → 2.18.6 Minor PR

Open 9 days ago 1 comment

Chore(deps): Bump com.fasterxml.jackson.core:jackson-core from 2.14.3 to 2.18.6 in /core/platform-common

Sunbird-Lern/userorg-service #1291

2.14.3 → 2.18.6 Minor PR

Open 9 days ago 1 comment

Bump com.fasterxml.jackson.core:jackson-core from 2.15.2 to 2.18.6 in /wrapperjakarta

genexuslabs/JavaClasses #1084

2.15.2 → 2.18.6 Minor PR

Closed 9 days ago 2 comments

Bump com.fasterxml.jackson.core:jackson-core from 2.19.0 to 2.21.1

powsybl/powsybl-metrix #271

2.19.0 → 2.21.1 Minor PR

Open 9 days ago 2 comments

Bump com.fasterxml.jackson.core:jackson-core from 2.19.4 to 2.21.1

networknt/openapi-parser #76

2.19.4 → 2.21.1 Minor PR

Closed 9 days ago 2 comments

Java: Bump the maven group across 3 directories with 4 updates

hashim21223445/semantic-kernel #35

2.18.2 → 2.18.6 Patch PR

Open 9 days ago 3 comments

Bump the maven group across 54 directories with 28 updates

Centaurioun/tutorials #1324

2.15.2 → 2.18.6 Minor PR

Closed 9 days ago 1 comment

chore(deps): bump com.fasterxml.jackson.core:jackson-core from 2.16.0 to 2.18.6 in /packages/sdk-java in the maven group across 1 directory

Hardonian/Settler #456

2.16.0 → 2.18.6 Minor PR

Closed 9 days ago 3 comments

build(deps): bump com.fasterxml.jackson.core:jackson-core from 2.18.6 to 2.21.1

anyulled/superhero-battle-arena #39

2.18.6 → 2.21.1 Minor PR

Open 9 days ago 2 comments

Bump com.fasterxml.jackson.core:jackson-core from 2.14.2 to 2.18.6 in /javav2/example_code/cloudwatch-logs in the maven group across 1 directory

blankynap/aws-doc-sdk-examples #8

2.14.2 → 2.18.6 Minor PR

Closed 9 days ago 1 comment

Bump com.fasterxml.jackson.core:jackson-core from 2.18.3 to 2.18.6

networknt/light-4j #2679

2.18.3 → 2.18.6 Patch PR

Closed 9 days ago 4 comments

Bump com.fasterxml.jackson.core:jackson-core from 2.20.1 to 2.21.1

axel3rd/mpg-coach-bot #287

2.20.1 → 2.21.1 Minor PR

Closed 9 days ago 2 comments

Bump the maven group across 3 directories with 1 update

bmarwell/social-metricbot #566

2.21.0 → 2.21.1 Patch PR

Open 9 days ago 1 comment

chore(deps): bump com.fasterxml.jackson.core:jackson-core from 2.16.0 to 2.18.6 in /appengine-java8/firebase-event-proxy in the maven group across 1 directory

Reality2byte/java-docs-samples #86

2.16.0 → 2.18.6 Minor PR

Closed 9 days ago 1 comment

Bump com.fasterxml.jackson.core:jackson-core from 2.0.4 to 2.18.6

OhoudAlawad/Demo-WebGoat #16

2.0.4 → 2.18.6 Minor PR

Open 9 days ago 1 comment

Bump the maven group across 5 directories with 2 updates

anystub/anystub #104

2.17.2 → 2.18.6 Minor PR

Open 9 days ago 1 comment

Bump the maven group across 6 directories with 2 updates

anystub/anystub #103

2.17.2 → 2.18.6 Minor PR

Open 9 days ago 1 comment

build(deps): bump com.fasterxml.jackson.core:jackson-core from 2.13.4 to 2.18.6 in /web/documentserver-example/java-spring

ONLYOFFICE/document-server-integration #650

2.13.4 → 2.18.6 Minor PR

Closed 9 days ago 1 comment

Bump com.fasterxml.jackson.core:jackson-core from 2.19.0 to 2.21.1

jtablesaw/tablesaw #1306

2.19.0 → 2.21.1 Minor PR

Open 9 days ago 1 comment

Bump com.fasterxml.jackson.core:jackson-core from 2.13.5 to 2.18.6

hifly81/kafka-examples #78

2.13.5 → 2.18.6 Minor PR

Closed 9 days ago 1 comment

Bump com.fasterxml.jackson.core:jackson-core from 2.18.2 to 2.18.6 in /mark59-metrics-common

mark-5-9/mark59-wip #51

2.18.2 → 2.18.6 Patch PR

Closed 9 days ago 1 comment

Bump com.fasterxml.jackson.core:jackson-core from 2.16.1 to 2.18.6 in /mark59-datahunter-api

mark-5-9/mark59-wip #50

2.16.1 → 2.18.6 Minor PR

Closed 9 days ago 1 comment

Bump com.fasterxml.jackson.core:jackson-core from 2.10.0 to 2.18.6 in /objectModel/Java/objectmodel

gengle/CDM #85

2.10.0 → 2.18.6 Minor PR

Open 9 days ago 1 comment

Bump com.fasterxml.jackson.core:jackson-core from 2.15.0 to 2.18.6 in /apigw-lambda-dynamodb-sam-java

Armor-test/serverless-patterns #6

2.15.0 → 2.18.6 Minor PR

Open 9 days ago 1 comment

build(deps): Bump com.fasterxml.jackson.core:jackson-core from 2.15.4 to 2.18.6

prestodb/presto #27238

2.15.4 → 2.18.6 Minor PR

Open 9 days ago 1 comment

Bump com.fasterxml.jackson.core:jackson-core from 2.20.1 to 2.21.1

pingidentity/scim2 #287

2.20.1 → 2.21.1 Minor PR

Closed 9 days ago 2 comments

Bump com.fasterxml.jackson.core:jackson-core from 2.19.1 to 2.21.1

wcm-io/io.wcm.maven.aem-cloud-dependencies #134

2.19.1 → 2.21.1 Minor PR

Closed 9 days ago 2 comments

chore(deps): bump com.fasterxml.jackson.core:jackson-core from 2.19.0 to 2.21.1

dhis2/dhis2-java-client #498

2.19.0 → 2.21.1 Minor PR

Open 9 days ago 1 comment

Bump com.fasterxml.jackson.core:jackson-core from 2.21.0 to 2.21.1

cognitect/transit-java #51

2.21.0 → 2.21.1 Patch PR

Closed 9 days ago 2 comments

Bump com.fasterxml.jackson.core:jackson-core from 2.15.0 to 2.18.6

mjeffrey/log-sanitizer #30

2.15.0 → 2.18.6 Minor PR

Open 9 days ago 1 comment

Bump com.fasterxml.jackson.core:jackson-core from 2.19.2 to 2.21.1 in /com.servoy.extensions

Servoy/servoy-extensions #22

2.19.2 → 2.21.1 Minor PR

Closed 9 days ago 1 comment

Bump com.fasterxml.jackson.core:jackson-core from 2.15.4 to 2.18.6

hypercube1024/firefly #122

2.15.4 → 2.18.6 Minor PR

Open 9 days ago 1 comment

Bump com.fasterxml.jackson.core:jackson-core from 2.14.0 to 2.18.6 in /openmaqs-webservices

OpenMAQS/openmaqs-java #78

2.14.0 → 2.18.6 Minor PR

Open 9 days ago 1 comment

Bump the maven group across 42 directories with 5 updates

qenex-ai/openapi-generator #1303

2.17.1 → 2.18.6 Minor PR

Closed 9 days ago 1 comment

Bump the maven group across 31 directories with 5 updates

qenex-ai/openapi-generator #1300

2.17.1 → 2.18.6 Minor PR

Closed 9 days ago 1 comment

build(deps): bump the maven group across 3 directories with 2 updates

pallakartheekreddy/knowledge-platform #13

2.15.0 → 2.18.6 Minor PR

Closed 9 days ago 1 comment

Package Details

Name:	`com.fasterxml.jackson.core:jackson-core`
Ecosystem:	maven
PURL Type:	maven
Package URL:	`pkg:maven/com.fasterxml.jackson.core:jackson-core`
JSON API:	View JSON

Security Advisories

3

Active advisories

HIGH 2

MODERATE 1

View All maven Advisories

Package Information

Description:

Core Jackson processing abstractions (aka Streaming API), implementation for JSON

Repository:	https://github.com/FasterXML/jackson-core
Homepage:	https://github.com/FasterXML/jackson-core
Latest Release:	`2.19.0` 11 months ago
Dependent Repos:	116,784
Dependent Packages:	12,374
Ranking:	Top 0.0078% by dependent repos Top 0.0036% by dependent pkgs

PR Status

Open 2,918 (53.7%)

Merged 391 (7.2%)

Closed 2,065 (38.0%)

PR Types

Minor 4,974 (91.6%)

Patch 335 (6.2%)

com.fasterxml.jackson.core:jackson-core

Security Advisories

jackson-core can throw a StackoverflowError when processing deeply nested data

jackson-core: Number Length Constraint Bypass in Async Parser Leads to Potential DoS Condition

Jackson-core Vulnerable to Memory Disclosure via Source Snippet in JsonLocation

Recent PRs

Package Details

Security Advisories

3

Package Information

PR Status

PR Types

`com.fasterxml.jackson.core:jackson-core`