https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T21:50:22.134791+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2023:2312 ALSA-2023:2312 — Moderate: jackson security update 2026-10-04T21:50:22.260323+00:00

Affected: AlmaLinux:9: pki-jackson-databind

Jackson is a suite of data-processing tools for Java, including the flagship streaming JSON parser / generator library, matching data-binding library, and additional modules to process data encoded in various other data formats.

Security Fix(es):

* jackson-databind: denial of service via a large depth of nested objects (CVE-2020-36518)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

 https://cve.radiocsirt.org/vuln/bdu:2024-00114 bdu:2024-00114 2026-10-04T21:50:22.260433+00:00 bdu:2024-00114 https://cve.radiocsirt.org/vuln/certfr-2022-avi-626 certfr-2022-avi-626 — De multiples vulnérabilités ont été découvertes dans IBM i Modernization. Certaines d'entre elles permettent à un attaq… 2026-10-04T21:50:22.260452+00:00 certfr-2022-avi-626 https://cve.radiocsirt.org/vuln/euvd-2026-251098 EUVD-2026-251098 2026-10-04T21:50:22.260469+00:00 EUVD-2026-251098 https://cve.radiocsirt.org/vuln/fkie_cve-2020-36518 fkie_cve-2020-36518 2026-10-04T21:50:22.260480+00:00

jackson-databind before 2.13.0 allows a Java StackOverflow exception and denial of service via a large depth of nested objects.

 https://cve.radiocsirt.org/vuln/ghsa-57j2-w4cx-62h2 GHSA-57j2-w4cx-62h2 — Deeply nested json in jackson-databind 2026-10-04T21:50:22.260502+00:00

Affected: Maven: com.fasterxml.jackson.core:jackson-databind

jackson-databind is a data-binding package for the Jackson Data Processor. jackson-databind allows a Java stack overflow exception and denial of service via a large depth of nested objects.

 https://cve.radiocsirt.org/vuln/gsd-2020-36518 gsd-2020-36518 2026-10-04T21:50:22.260523+00:00 gsd-2020-36518 https://cve.radiocsirt.org/vuln/oesa-2023-1921 OESA-2023-1921 — jackson-databind security update 2026-10-04T21:50:22.260534+00:00

Affected: openEuler:20.03-LTS-SP1: jackson-databind, openEuler:20.03-LTS-SP3: jackson-databind, openEuler:22.03-LTS: jackson-databind, openEuler:22.03-LTS-SP1: jackson-databind, openEuler:22.03-LTS-SP2: jackson-databind

The general-purpose data-binding functionality and tree-model for Jackson Data Processor. It builds on core streaming parser/generator package, and uses Jackson Annotations for configuration. Security Fix(es): jackson-databind before 2.13.0 allows a Java StackOverflow exception and denial of service via a large depth of nested objects.(CVE-2020-36518) In FasterXML jackson-databind before 2.14.0-rc1, resource exhaustion can occur because of a lack of a check in primitive value deserializers to avoid deep wrapper array nesting, when the UNWRAP_SINGLE_VALUE_ARRAYS feature is enabled. Additional fix version in 2.13.4.1 and 2.12.17.1(CVE-2022-42003) In FasterXML jackson-databind before 2.13.4, resource exhaustion can occur because of a lack of a check in BeanDeserializer._deserializeFromArray to prevent use of deeply nested arrays. An application is vulnerable only with certain customized choices for deserialization.(CVE-2022-42004)

 https://cve.radiocsirt.org/vuln/opensuse-su-2024:12096-1 openSUSE-SU-2024:12096-1 — jackson-databind-2.13.0-2.1 on GA media 2026-10-04T21:50:22.260571+00:00

jackson-databind-2.13.0-2.1 on GA media

 https://cve.radiocsirt.org/vuln/rhsa-2022:2232 RHSA-2022:2232 — Red Hat Security Advisory: Red Hat Data Grid 8.3.1 security update 2026-10-04T21:50:22.260591+00:00

jackson-databind: denial of service via a large depth of nested objects Kafka: Timing Attack Vulnerability for Apache Kafka Connect and Clients xnio: org.xnio.StreamConnection.notifyReadClosed log to debug instead of stderr

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2020-36518 UBUNTU-CVE-2020-36518 2026-10-04T21:50:22.260611+00:00

Affected: Ubuntu:Pro:14.04:LTS: jackson-databind, Ubuntu:Pro:16.04:LTS: jackson-databind, Ubuntu:18.04:LTS: jackson-databind, Ubuntu:20.04:LTS: jackson-databind, Ubuntu:22.04:LTS: jackson-databind, Ubuntu:24.04:LTS: jackson-databind, Ubuntu:25.10: jackson-databind, Ubuntu:26.04:LTS: jackson-databind

jackson-databind before 2.13.0 allows a Java StackOverflow exception and denial of service via a large depth of nested objects.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-0360 WID-SEC-W-2022-0360 — FasterXML Jackson: Schwachstelle ermöglicht Denial of Service 2026-10-04T21:50:22.260638+00:00

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in FasterXML Jackson ausnutzen, um einen Denial of Service Angriff durchzuführen.