FasterXML jackson-core vulnerabilities
8 published CVEs name FasterXML jackson-core among the affected products.
- 8Published CVEs8 of them scored
- 6Last 12 monthspublished in the last year
- 0Critical6 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-68498
jackson-core: Delayed maxNameLength enforcement for char-backed input (ReaderBasedJsonParser) allows memory-exhaustion denial of service
FasterXML · jackson-core
High7.5 - CVE-2026-89425
jackson-core: UTF8DataInputJsonParser._reportInvalidToken() does not honor maxErrorTokenLength, allowing unbounded StringBuilder growth
FasterXML · jackson-core
High7.5 - CVE-2026-89407
jackson-core: quadratic backtracking in NumberInput.PATTERN_FLOAT via looksLikeValidNumber() enables ReDoS
FasterXML · jackson-core
High7.5 - CVE-2026-68494
jackson-core: Async parser maxNumberLength bypass via chunked digit accumulation (incomplete fix for CVE-2026-18401 / GHSA-72hv-8253-57qq)
FasterXML · jackson-core
High8.7 - CVE-2026-18401
jackson-core: Number length constraint bypass in non-blocking (async) JSON parser leads to potential denial of service
FasterXML · jackson-core
Medium6.9 - CVE-2026-29062
jackson-core: Nesting Depth Constraint Bypass in `UTF8DataInputJsonParser` potentially allowing Resource Exhaustion
FasterXML · jackson-core
High8.7 - CVE-2025-52999
jackson-core Has Potential for StackoverflowError if user parses an input file that contains very deeply nested data
FasterXML · jackson-core
High8.7 - CVE-2025-49128
Jackson-core Vulnerable to Memory Disclosure via Source Snippet in JsonLocation
FasterXML · jackson-core
Medium4.0