Defined in 2 files
Last patched
_deserializeUsingPropertyBased in FasterXML/jackson-databind was changed by 1 published CVE fixes in 2026, in 4 distinct patches that added or removed 14 lines in total.
The name occurs in 2 files: src/main/java/tools/jackson/databind/deser/bean/BeanDeserializer.java, src/main/java/com/fasterxml/jackson/databind/deser/BeanDeserializer.java.
FasterXML/jackson-databind has 72 CVEs with a located fix in total, so 1% of them touched this function.
Every published CVE whose fix changed _deserializeUsingPropertyBased, newest first, with the lines each fix touched.
CVE-2026-54517 · src/main/java/com/fasterxml/jackson/databind/deser/BeanDeserializer.java · lines 486–492 · +7 −0
CVE-2026-54517 · src/main/java/tools/jackson/databind/deser/bean/BeanDeserializer.java · lines 731–737 · +7 −0
Get an alert when the next CVE fix lands in FasterXML/jackson-databind, with the patched functions.
Monitor jackson-databind CVEsFunctions in the same files that CVE fixes also changed.
Functions in FasterXML/jackson-databind changed by the most CVE fixes.
Common questions about CVE fixes to _deserializeUsingPropertyBased.
Fix locations are computed by RadicalNotion.AI from the upstream patch diff of each CVE. CVE data is sourced from the CVE Program.
Get an alert when a new CVE lands in this repository, with the patched functions and AI-written remediation guidance.
