An open index of dependabot pull requests across open source projects.

com.fasterxml.jackson.core:jackson-databind

Ecosystem:
maven
Package URL:
pkg:maven/com.fasterxml.jackson.core:jackson-databind
Total PRs:
2,937 Dependabot PRs
Latest PR:
about 21 hours ago
Unique Repositories:
1,133 repositories
Unique Repos (30 days):
44 repositories
Security Advisories
Deserialization of Untrusted Data in jackson-databind due to polymorphic deserialization
GHSA-f9hv-mg5h-xcw9 CVE-2018-19360 CRITICAL published over 7 years ago • updated about 1 hour ago
FasterXML jackson-databind 2.x before 2.9.8 might allow attackers to have unspecified impact by leveraging failure to block the axis2-transport-jms...
Uncontrolled Resource Consumption in FasterXML jackson-databind
GHSA-rgv9-q543-rqg4 CVE-2022-42004 HIGH published almost 4 years ago • updated about 23 hours ago
In FasterXML jackson-databind before 2.12.7.1 and in 2.13.x before 2.13.4, resource exhaustion can occur because of a lack of a check in BeanDeseri...
jackson-databind polymorphic typing issue
GHSA-fmmc-742q-jg75 CVE-2019-16943 CRITICAL published almost 7 years ago • updated about 8 hours ago
A Polymorphic Typing issue was discovered in FasterXML jackson-databind 2.0.0 prior to 2.9.10.1, 2.8.11.5, and 2.6.7.3. When Default Typing is enab...
Deserialization of untrusted data in Jackson Databind
GHSA-c265-37vj-cwcc CVE-2020-14062 HIGH published over 6 years ago • updated 6 days ago
FasterXML jackson-databind 2.x before 2.9.10.5 mishandles the interaction between serialization gadgets and typing, related to com.sun.org.apache.x...
jackson-databind mishandles the interaction between serialization gadgets and typing
GHSA-5p34-5m6p-p58g CVE-2020-9546 CRITICAL published over 6 years ago • updated about 1 hour ago
FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.apache.hadoop.sh...
Recent PRs
Package Details
Name: com.fasterxml.jackson.core:jackson-databind
Ecosystem: maven
PURL Type: maven
Package URL: pkg:maven/com.fasterxml.jackson.core:jackson-databind
JSON API: View JSON
Security Advisories

85

Active advisories
CRITICAL 24
HIGH 48
MODERATE 13
View All maven Advisories
Package Information
Description:

General data-binding functionality for Jackson: works on core streaming API

Repository: https://github.com/FasterXML/jackson-databind
Homepage: https://github.com/FasterXML/jackson
Latest Release: 2.19.0
over 1 year ago
Dependent Repos: 244,221
Dependent Packages: 23,566
Ranking: Top 0.0024% by dependent repos Top 0.0012% by dependent pkgs
PR Status
Open 1,314 (44.7%)
Merged 635 (21.6%)
Closed 912 (31.1%)
PR Types
Minor 1,651 (56.2%)
Patch 1,136 (38.7%)