JA
Product
jackson-core
8
CVEs
0
On KEV
8.7
Max CVSS
1
New 30D
Severity mix
Critical 0High 6Medium 2Low 0
Watch
Add jackson-core to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-18401 | 6.9 | Aug 4 | jackson-core: Number length constraint bypass in non-blocking (async) JSON parser leads to potential denial of service Affected: 2.15.0 through 2.18.5; 2.19.0 before 2.21.1; 3.0.0 before 3.1.0 |
| CVE-2025-49128 | 4.0 | Jun 6 | Jackson-core Vulnerable to Memory Disclosure via Source Snippet in JsonLocation Affected: >= 2.0.0, < 2.13.0 |
Showing 2