`com.fasterxml.jackson.core:jackson-core`

Ecosystem:
maven

Package URL:
pkg:maven/com.fasterxml.jackson.core:jackson-core

Total PRs:
5,528 Dependabot PRs

Latest PR:
4 days ago

Unique Repositories:
3,318 repositories

Unique Repos (30 days):
16 repositories

Security Advisories

jackson-core can throw a StackoverflowError when processing deeply nested data

GHSA-h46c-h94j-95f3 CVE-2025-52999 HIGH published 12 months ago • updated 1 day ago

### Impact With older versions of jackson-core, if you parse an input file and it has deeply nested data, Jackson could end up throwing a Stackove...

Jackson-core Vulnerable to Memory Disclosure via Source Snippet in JsonLocation

GHSA-wf8f-6423-gfxg CVE-2025-49128 MODERATE published about 1 year ago • updated 1 day ago

### Overview A flaw in Jackson-core's `JsonLocation._appendSourceDesc` method allows up to 500 bytes of unintended memory content to be included i...

jackson-core: Number Length Constraint Bypass in Async Parser Leads to Potential DoS Condition

GHSA-72hv-8253-57qq MODERATE published 4 months ago • updated 27 days ago

### Summary The non-blocking (async) JSON parser in `jackson-core` bypasses the `maxNumberLength` constraint (default: 1000 characters) defined in ...

Recent PRs

RSS Feed

chore(deps): bump the all-backend-non-major-dependencies group across 1 directory with 13 updates

digitalservicebund/ris-norms #2335

2.21.3 → 2.22.0 Minor PR

Closed 4 days ago 1 comment

Bump the gradle-updates group across 1 directory with 9 updates

ministryofjustice/laa-data-claims-certificated-api #13

2.21.2 → 2.21.4 Patch PR

Open 5 days ago 1 comment

Bump the bpm-minor-patch group across 1 directory with 29 updates

AOT-Technologies/forms-flow-ai #3317

2.15.0 → 2.22.0 Minor PR

Open 7 days ago 2 comments

Bump com.fasterxml.jackson.core:jackson-core from 2.21.4 to 2.22.0

sir-gon/algorithm-exercises-java #517

2.21.4 → 2.22.0 Minor PR

Open 7 days ago 2 comments

deps: Bump com.fasterxml.jackson.core:jackson-core from 2.21.3 to 2.22.0

arconia-io/arconia-cli #130

2.21.3 → 2.22.0 Minor PR

Open 11 days ago 1 comment

build(deps): bump com.fasterxml.jackson.core:jackson-core from 2.21.4 to 2.22.0

asyncapi/jasyncapi-idea-plugin #301

2.21.4 → 2.22.0 Minor PR

Closed 11 days ago 1 comment

build(deps): bump com.fasterxml.jackson.core:jackson-core from 2.21.4 to 2.22.0

liquibase/liquibase-opensearch #255

2.21.4 → 2.22.0 Minor PR

Closed 11 days ago 1 comment

build(deps): bump com.fasterxml.jackson.core:jackson-core from 2.21.3 to 2.21.4

anyulled/superhero-battle-arena #103

2.21.3 → 2.21.4 Patch PR

Open 14 days ago 3 comments

chore(deps): bump the maven-minor-patch group across 1 directory with 9 updates

Pololac/PowerMe #104

2.21.2 → 2.21.4 Patch PR

Open 15 days ago 1 comment

Bump the safe-patch-updates group across 1 directory with 19 updates

datasharingframework/dsf #506

2.21.2 → 2.21.3 Patch PR

Closed 22 days ago 1 comment

chore(deps): bump the maven-production group across 1 directory with 8 updates

DrakesCraft-Labs/drakes-slimefun-labs #33

2.21.1 → 2.21.3 Patch PR

Closed 24 days ago 4 comments

chore(deps): Bump the maven group across 5 directories with 8 updates

nishithakbhaskaran/presto-oss-fix #44

2.15.4 → 2.18.6 Minor PR

Open 25 days ago 1 comment

chore(deps): bump the maven-production group across 1 directory with 16 updates

DrakesCraft-Labs/drakes-slimefun-labs #32

2.21.1 → 2.21.3 Patch PR

Open 25 days ago 2 comments

Bump the maven group across 8 directories with 10 updates

vicaya/pulsar #9

2.6.5 → 2.18.6 Minor PR

Closed 27 days ago 1 comment

Bump the maven group across 7 directories with 16 updates

vishakha-mali/dubbo #7

2.18.2 → 2.18.6 Patch PR

Closed 27 days ago 1 comment

deps(openmason)(deps): bump the openmason-tool group in /openmason-tool with 15 updates

Sonar-Arts/Stonebreak #163

2.21.1 → 2.21.3 Patch PR

Closed 29 days ago 1 comment

chore(deps): bump the maven-minor-patch group with 165 updates

open-metadata/OpenMetadata #28193

2.18.7 → 2.21

Open 30 days ago 1 comment

Bump the safe-patch-updates group across 1 directory with 12 updates

datasharingframework/dsf #498

2.21.2 → 2.21.3 Patch PR

Closed about 1 month ago 1 comment

Bump com.fasterxml.jackson.core:jackson-core from 2.15.2 to 2.18.6 in /src/libs/dps-bom

bcgov/jag-dps #466

2.15.2 → 2.18.6 Minor PR

Open about 1 month ago 4 comments

Bump the maven group across 19 directories with 9 updates

dhay3/spring #3

2.10.3 → 2.18.6 Minor PR

Closed about 1 month ago 1 comment

chore(deps): Bump the maven group across 2 directories with 7 updates

saytyarnorngloreia/risingwave #7

2.18.3 → 2.18.6 Patch PR

Closed about 1 month ago 1 comment

Bump the gradle-updates group across 1 directory with 4 updates

ministryofjustice/laa-data-claims-notify-service #3

2.21.2 → 2.21.3 Patch PR

Closed about 1 month ago 2 comments

chore(deps): bump the backend-dependencies group with 41 updates

paykaribazaronline/supremeai #53

2.17.0 → 2.21.3 Minor PR

Open about 1 month ago 2 comments

Bump the safe-patch-updates group across 1 directory with 11 updates

datasharingframework/dsf #495

2.21.2 → 2.21.3 Patch PR

Closed about 1 month ago 1 comment

chore(deps): bump com.fasterxml.jackson.core:jackson-core from 2.21.2 to 2.21.3 in /lib/java

TruvetaPublic/OpenLinkToken #326

2.21.2 → 2.21.3 Patch PR

Open about 1 month ago 4 comments

chore(deps): bump the gradle-minor-patch group with 8 updates

edgafner/GBrowser #692

2.21.2 → 2.21.3 Patch PR

Open about 1 month ago 1 comment

build(deps): bump com.fasterxml.jackson.core:jackson-core from 2.21.2 to 2.21.3

liquibase/liquibase-opensearch #234

2.21.2 → 2.21.3 Patch PR

Closed about 2 months ago 1 comment

deps: Bump com.fasterxml.jackson.core:jackson-core from 2.21.2 to 2.21.3

arconia-io/arconia-cli #114

2.21.2 → 2.21.3 Patch PR

Open about 2 months ago 1 comment

chore(deps): Bump the all group across 1 directory with 55 updates

risingwavelabs/risingwave #25530

2.19.2 → 2.21.3 Minor PR

Closed about 2 months ago 1 comment

Bump the maven group across 18 directories with 24 updates

abrahem79/glowroot #5

2.8.10 → 2.18.6 Minor PR

Open about 2 months ago 2 comments

Bump the maven group across 11 directories with 16 updates

GizzZmo/dubbo #4

2.15.2 → 2.18.6 Minor PR

Closed about 2 months ago 1 comment

Bump the all-minor-patch group across 1 directory with 33 updates

navikt/innsending-api #382

2.19.2 → 2.21

Closed about 2 months ago 1 comment

Bump the dependencies group across 1 directory with 17 updates

FraunhoferIOSB/FROST-Server #2349

2.21.1 → 2.21.2 Patch PR

Closed about 2 months ago 1 comment

chore(deps-dev): bump com.fasterxml.jackson.core:jackson-core from 2.13.5 to 2.18.6 in /hudi-azure

apache/hudi #18528

2.13.5 → 2.18.6 Minor PR

Open about 2 months ago 1 comment

chore(deps): bump com.fasterxml.jackson.core:jackson-core from 2.21.0 to 2.21.1 in /urlshortener-core

svenruppert/url-shortener #19

2.21.0 → 2.21.1 Patch PR

Closed about 2 months ago 1 comment

chore(deps): bump com.fasterxml.jackson.core:jackson-core from 2.21.0 to 2.21.1 in /urlshortener-client

svenruppert/url-shortener #18

2.21.0 → 2.21.1 Patch PR

Closed about 2 months ago 1 comment

Bump the maven group across 1 directory with 3 updates

oculix-org/Oculix #154

2.9.10 → 2.18.6 Minor PR

Open 2 months ago 1 comment

Bump the maven group across 22 directories with 18 updates

veteranbv/nifi #6

2.5.4 → 2.18.6 Minor PR

Closed 2 months ago 1 comment

Bump the maven group across 7 directories with 12 updates

sundaramoorthym/apex-malhar #6

2.7.0 → 2.18.6 Minor PR

Closed 2 months ago 1 comment

build(deps): bump com.fasterxml.jackson.core:jackson-core from 2.21.1 to 2.21.2

ShaftHQ/SHAFT_ENGINE #2409

2.21.1 → 2.21.2 Patch PR

Open 2 months ago 1 comment

Bump the maven group across 8 directories with 9 updates

xxubai/amoro #12

2.13.5 → 2.18.6 Minor PR

Closed 2 months ago 1 comment

Bump the maven group across 8 directories with 10 updates

Kakachia777/neo4j #2

2.18.0 → 2.18.6 Patch PR

Closed 2 months ago 1 comment

Bump the maven group across 8 directories with 8 updates

vicaya/pulsar #4

2.6.5 → 2.18.6 Minor PR

Closed 2 months ago 1 comment

Bump com.fasterxml.jackson.core:jackson-core from 2.8.3 to 2.18.6

uukenex/prac #65

2.8.3 → 2.18.6 Minor PR

Closed 2 months ago 1 comment

chore(deps): bump com.fasterxml.jackson.core:jackson-core from 2.21.0 to 2.21.1 in /urlshortener-ui

svenruppert/url-shortener #16

2.21.0 → 2.21.1 Patch PR

Closed 2 months ago 1 comment

chore(deps): bump com.fasterxml.jackson.core:jackson-core from 2.21.0 to 2.21.1 in /urlshortener-server

svenruppert/url-shortener #15

2.21.0 → 2.21.1 Patch PR

Closed 2 months ago 1 comment

Bump the maven group across 3 directories with 21 updates

idgrou/sakai #10

2.17.2 → 2.18.6 Minor PR

Closed 2 months ago 2 comments

Bump the maven group across 7 directories with 16 updates

vishakha-mali/dubbo #2

2.18.2 → 2.18.6 Patch PR

Closed 2 months ago 1 comment

Bump the maven group across 12 directories with 11 updates

deleonio/openapi-generator #4

2.10.5 → 2.18.6 Minor PR

Closed 2 months ago 1 comment

Bump the maven group across 5 directories with 4 updates

Alfresco/alfresco-community-repo #3990

2.17.2 → 2.18.6 Minor PR

Closed 2 months ago 1 comment

Package Details

Name:	`com.fasterxml.jackson.core:jackson-core`
Ecosystem:	maven
PURL Type:	maven
Package URL:	`pkg:maven/com.fasterxml.jackson.core:jackson-core`
JSON API:	View JSON

Security Advisories

3

Active advisories

HIGH 1

MODERATE 2

View All maven Advisories

Package Information

Description:

Core Jackson processing abstractions (aka Streaming API), implementation for JSON

Repository:	https://github.com/FasterXML/jackson-core
Homepage:	https://github.com/FasterXML/jackson-core
Latest Release:	`2.19.0` about 1 year ago
Dependent Repos:	116,784
Dependent Packages:	12,374
Ranking:	Top 0.0078% by dependent repos Top 0.0036% by dependent pkgs

PR Status

Open 2,945 (53.3%)

Merged 391 (7.1%)

Closed 2,136 (38.6%)

PR Types

Minor 5,027 (90.9%)

Patch 376 (6.8%)