An open index of dependabot pull requests across open source projects.

com.fasterxml.jackson.core:jackson-databind

Ecosystem:
maven
Package URL:
pkg:maven/com.fasterxml.jackson.core:jackson-databind
Total PRs:
2,270 Dependabot PRs
Latest PR:
about 15 hours ago
Unique Repositories:
872 repositories
Unique Repos (30 days):
291 repositories
Security Advisories
jackson-databind mishandles the interaction between serialization gadgets and typing
GHSA-758m-v56v-grj4 CVE-2020-10969 HIGH published over 5 years ago • updated 4 months ago
FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to javax.swing.JEditorP...
Deserialization of Untrusted Data in jackson-databind due to polymorphic deserialization
GHSA-f9hv-mg5h-xcw9 CVE-2018-19360 CRITICAL published over 6 years ago • updated about 2 months ago
FasterXML jackson-databind 2.x before 2.9.8 might allow attackers to have unspecified impact by leveraging failure to block the axis2-transport-jms...
Deserialization of untrusted data in Jackson Databind
GHSA-mc6h-4qgp-37qh CVE-2020-14195 HIGH published over 5 years ago • updated about 2 months ago
FasterXML jackson-databind 2.x before 2.9.10.5 mishandles the interaction between serialization gadgets and typing, related to org.jsecurity.realm....
jackson-databind mishandles the interaction between serialization gadgets and typing
GHSA-q93h-jc49-78gg CVE-2020-9547 CRITICAL published over 5 years ago • updated about 2 months ago
FasterXML jackson-databind 2.x before 2.9.10.4, 2.8.11.6, and 2.7.9.7 mishandles the interaction between serialization gadgets and typing, related ...
jackson-databind vulnerable to deserialization flaw leading to unauthenticated remote code execution
GHSA-h592-38cm-4ggp CVE-2017-15095 CRITICAL published almost 7 years ago • updated about 1 month ago
jackson-databind in versions prior to 2.8.11 and 2.9.4 contain a deserialization flaw which allows an unauthenticated user to perform code executio...
Recent PRs
Package Details
Name: com.fasterxml.jackson.core:jackson-databind
Ecosystem: maven
PURL Type: maven
Package URL: pkg:maven/com.fasterxml.jackson.core:jackson-databind
JSON API: View JSON
Security Advisories

69

Active advisories
CRITICAL 24
HIGH 43
MODERATE 2
View All maven Advisories
Package Information
Description:

General data-binding functionality for Jackson: works on core streaming API

Repository: https://github.com/FasterXML/jackson-databind
Homepage: https://github.com/FasterXML/jackson
Latest Release: 2.19.0
5 months ago
Dependent Repos: 244,221
Dependent Packages: 23,566
Ranking: Top 0.0024% by dependent repos Top 0.0012% by dependent pkgs
PR Status
Open 1,062 (46.8%)
Merged 622 (27.4%)
Closed 508 (22.4%)
PR Types
Minor 1,269 (56.0%)
Patch 893 (39.4%)