CVE security advisories and vulnerability history for jackson-databind by FasterXML.
87
Total CVEs
Published
0
In CISA KEV
Exploited in the wild
26
Public exploits
PoC or exploit code
8.2
Avg CVSS
2017–2026
Last updated
Overview
FasterXML jackson-databind has 87 published CVE records since 2017, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 26 have a known public exploit. The average CVSS base score across scored CVEs is 8.2.
Severity and exploitation
How the CVSS severity of FasterXML jackson-databind's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.
Critical26
High47
Medium14
Low0
In CISA’s Known Exploited Vulnerabilities catalog
0
None of FasterXML jackson-databind's CVEs are currently listed in CISA's KEV catalog.
Public exploits
26
26 of FasterXML jackson-databind's CVEs have a known public exploit available.
Affected versions and CVEs
Browse every FasterXML jackson-databind version named in a CVE, then pick one to see only the CVEs that affect it.
Common questions about FasterXML jackson-databind vulnerabilities.
How many CVEs does FasterXML jackson-databind have?
FasterXML jackson-databind has 87 published CVE records since 2017.
How many FasterXML jackson-databind CVEs are in CISA KEV?
None of FasterXML jackson-databind's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for FasterXML jackson-databind vulnerabilities?
Yes — 26 of FasterXML jackson-databind's CVEs have a known public exploit.
Which versions of FasterXML jackson-databind are affected?
591 distinct FasterXML jackson-databind versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in FasterXML jackson-databind CVEs?
FasterXML jackson-databind's CVEs most often map to these CWE weakness types: CWE-502 (Deserialization of Untrusted Data), CWE-184 (Incomplete List of Disallowed Inputs), CWE-400 (Uncontrolled Resource Consumption), CWE-918 (Server-Side Request Forgery (SSRF)).
How many critical FasterXML jackson-databind vulnerabilities are there?
FasterXML jackson-databind has 26 critical and 47 high-severity CVEs.
What is the average severity of FasterXML jackson-databind CVEs?
The average CVSS base score across FasterXML jackson-databind's scored CVEs is 8.2.
