FasterXML

Records108All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical28CVSS 9.0–10.0

CVSS high62CVSS 7.0–8.9

Exploited now

FasterXML records in CISA KEV

No FasterXML vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Jackson-databind 78 records HIGH Jackson-dataformat-xml 2 records MEDIUM Jackson-core 1 record MEDIUM Jackson-dataformats-binary 1 record LOW Jackson-dataformats-text 1 record MEDIUM Jackson-mapper-asl 1 record MEDIUM Jackson-modules-java8 1 record LOW Woodstox 1 record HIGH

Records

1 record in Jackson-core · all components

TI-2026-23207 CVE-2026-29062 · GHSA-6v53-7c9g-w56r

jackson-core: Nesting Depth Constraint Bypass in `UTF8DataInputJsonParser` potentially allowing Resource Exhaustion

MEDIUM 45

jackson-core contains core low-level incremental ("streaming") parser and generator abstractions used by Jackson Data Processor.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00614 Published 2026-03-06 Fixed in 3.1.0 CWE-770

Open these records in search →