Search Results (2 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2026-95155 1 Fasterxml 1 Jackson-mapper-asl 2026-10-23 7.5 High
FasterXML Jackson 1.x, confirmed in jackson-mapper-asl versions 1.8.3, 1.9.2, 1.9.11, 1.9.12, and 1.9.13, allows attackers to cause a denial of service by supplying deeply nested JSON input to an application that deserializes untrusted JSON using ObjectMapper.readValue.
CVE-2019-10172 4 Apache, Debian, Fasterxml and 1 more 8 Spark, Debian Linux, Jackson-mapper-asl and 5 more 2024-11-21 7.5 High
A flaw was found in org.codehaus.jackson:jackson-mapper-asl:1.9.x libraries. XML external entity vulnerabilities similar CVE-2016-3720 also affects codehaus jackson-mapper-asl libraries but in different classes.