-
Notifications
You must be signed in to change notification settings - Fork 3
Open
Description
Vulnerabilities
DepShield reports that this application's usage of com.fasterxml.jackson.core:jackson-databind:2.9.9 results in the following vulnerability(s):
- (CVSS 9.8) [CVE-2019-16335] A Polymorphic Typing issue was discovered in FasterXML jackson-databind before 2...
- (CVSS 9.8) [CVE-2020-9547] FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction betwee...
- (CVSS 9.8) [CVE-2019-17531] A Polymorphic Typing issue was discovered in FasterXML jackson-databind 2.0.0 th...
- (CVSS 9.8) [CVE-2020-11620] FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction betwee...
- (CVSS 9.8) [CVE-2019-20330] FasterXML jackson-databind 2.x before 2.9.10.2 lacks certain net.sf.ehcache bloc...
- (CVSS 9.8) [CVE-2020-9548] FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction betwee...
- (CVSS 9.8) [CVE-2019-14892] A flaw was discovered in jackson-databind in versions before 2.9.10, 2.8.11.5 an...
- (CVSS 9.8) [CVE-2020-11619] FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction betwee...
- (CVSS 9.8) [CVE-2019-16943] A Polymorphic Typing issue was discovered in FasterXML jackson-databind 2.0.0 th...
- (CVSS 9.8) [CVE-2019-16942] A Polymorphic Typing issue was discovered in FasterXML jackson-databind 2.0.0 th...
- (CVSS 9.8) [CVE-2020-8840] FasterXML jackson-databind 2.0.0 through 2.9.10.2 lacks certain xbean-reflect/JN...
- (CVSS 9.8) [CVE-2020-9546] FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction betwee...
- (CVSS 9.8) [CVE-2019-14540] A Polymorphic Typing issue was discovered in FasterXML jackson-databind before 2...
- (CVSS 9.8) [CVE-2019-17267] A Polymorphic Typing issue was discovered in FasterXML jackson-databind before 2...
- (CVSS 9.8) [CVE-2019-14893] A flaw was discovered in FasterXML jackson-databind in all versions before 2.9.1...
- (CVSS 9.8) [CVE-2019-14379] SubTypeValidator.java in FasterXML jackson-databind before 2.9.9.2 mishandles de...
- (CVSS 8.8) [CVE-2020-10969] FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction betwee...
- (CVSS 8.8) [CVE-2020-10968] FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction betwee...
- (CVSS 8.8) [CVE-2020-10672] FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction betwee...
- (CVSS 8.8) [CVE-2020-10673] FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction betwee...
- (CVSS 8.8) [CVE-2020-11113] FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction betwee...
- (CVSS 8.8) [CVE-2020-11112] FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction betwee...
- (CVSS 8.8) [CVE-2020-11111] FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction betwee...
- (CVSS 8.1) [CVE-2020-35728] FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction betwee...
- (CVSS 8.1) [CVE-2020-36180] FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction betwee...
- (CVSS 8.1) [CVE-2020-36184] FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction betwee...
- (CVSS 8.1) [CVE-2020-36182] FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction betwee...
- (CVSS 8.1) [CVE-2020-36179] FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction betwee...
- (CVSS 8.1) [CVE-2020-36189] FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction betwee...
- (CVSS 8.1) [CVE-2020-35491] FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction betwee...
- (CVSS 8.1) [CVE-2021-20190] A flaw was found in jackson-databind before 2.9.10.7. FasterXML mishandles the i...
- (CVSS 8.1) [CVE-2020-14062] FasterXML jackson-databind 2.x before 2.9.10.5 mishandles the interaction betwee...
- (CVSS 8.1) [CVE-2020-36183] FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction betwee...
- (CVSS 8.1) [CVE-2020-36185] FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction betwee...
- (CVSS 8.1) [CVE-2020-14061] FasterXML jackson-databind 2.x before 2.9.10.5 mishandles the interaction betwee...
- (CVSS 8.1) [CVE-2020-35490] FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction betwee...
- (CVSS 8.1) [CVE-2020-36188] FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction betwee...
- (CVSS 8.1) [CVE-2020-24750] FasterXML jackson-databind 2.x before 2.9.10.6 mishandles the interaction betwee...
- (CVSS 8.1) [CVE-2020-24616] FasterXML jackson-databind 2.x before 2.9.10.6 mishandles the interaction betwee...
- (CVSS 8.1) [CVE-2020-36187] FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction betwee...
- (CVSS 8.1) [CVE-2020-36181] FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction betwee...
- (CVSS 8.1) [CVE-2020-14060] FasterXML jackson-databind 2.x before 2.9.10.5 mishandles the interaction betwee...
- (CVSS 8.1) [CVE-2020-36186] FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction betwee...
- (CVSS 8.1) [CVE-2020-14195] FasterXML jackson-databind 2.x before 2.9.10.5 mishandles the interaction betwee...
- (CVSS 7.5) [CVE-2020-25649] A flaw was found in FasterXML Jackson Databind, where it did not have entity exp...
- (CVSS 7.5) [CVE-2019-14439] A Polymorphic Typing issue was discovered in FasterXML jackson-databind 2.x befo...
- (CVSS 5.9) [CVE-2019-12814] Information Exposure
- (CVSS 5.9) [CVE-2019-12384] Deserialization of Untrusted Data
Occurrences
com.fasterxml.jackson.core:jackson-databind:2.9.9 is a transitive dependency introduced by the following direct dependency(s):
• com.amazonaws:aws-java-sdk-dynamodb:1.11.899
└─ com.amazonaws:aws-java-sdk-core:1.11.899
└─ com.fasterxml.jackson.core:jackson-databind:2.9.9
This is an automated GitHub Issue created by Sonatype DepShield. Details on managing GitHub Apps, including DepShield, are available for personal and organization accounts. Please submit questions or feedback about DepShield to the Sonatype DepShield Community.
Metadata
Metadata
Assignees
Labels
No labels