https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T04:03:07.964872+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2024-00181 bdu:2024-00181 2026-10-03T04:03:08.174282+00:00 bdu:2024-00181 https://cve.radiocsirt.org/vuln/bit-nifi-2021-20190 BIT-nifi-2021-20190 2026-10-03T04:03:08.174324+00:00

Affected: Bitnami: nifi

A flaw was found in jackson-databind before 2.9.10.7. FasterXML mishandles the interaction between serialization gadgets and typing. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.

 https://cve.radiocsirt.org/vuln/certfr-2021-avi-101 certfr-2021-avi-101 — De multiples vulnérabilités ont été découvertes dans IBM Spectrum Protect Plus. Elles permettent à un attaquant de prov… 2026-10-03T04:03:08.174358+00:00 certfr-2021-avi-101 https://cve.radiocsirt.org/vuln/cnvd-2021-06524 cnvd-2021-06524 2026-10-03T04:03:08.174376+00:00 cnvd-2021-06524 https://cve.radiocsirt.org/vuln/euvd-2026-251099 EUVD-2026-251099 2026-10-03T04:03:08.174387+00:00 EUVD-2026-251099 https://cve.radiocsirt.org/vuln/fkie_cve-2021-20190 fkie_cve-2021-20190 2026-10-03T04:03:08.174398+00:00

A flaw was found in jackson-databind before 2.9.10.7. FasterXML mishandles the interaction between serialization gadgets and typing. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.

 https://cve.radiocsirt.org/vuln/ghsa-5949-rw7g-wx7w GHSA-5949-rw7g-wx7w — Deserialization of untrusted data in jackson-databind 2026-10-03T04:03:08.174419+00:00

Affected: Maven: com.fasterxml.jackson.core:jackson-databind

A flaw was found in jackson-databind before 2.9.10.7 and 2.6.7.5. FasterXML mishandles the interaction between serialization gadgets and typing. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.

 https://cve.radiocsirt.org/vuln/gsd-2021-20190 gsd-2021-20190 2026-10-03T04:03:08.174441+00:00 gsd-2021-20190 https://cve.radiocsirt.org/vuln/oesa-2021-1051 OESA-2021-1051 — jackson-databind security update 2026-10-03T04:03:08.174451+00:00

Affected: openEuler:20.03-LTS-SP1: jackson-databind

The general-purpose data-binding functionality and tree-model for Jackson Data Processor. It builds on core streaming parser/generator package, and uses Jackson Annotations for configuration. Security Fix(es): FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp2.cpdsadapter.DriverAdapterCPDS.(CVE-2020-36182) FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to org.docx4j.org.apache.xalan.lib.sql.JNDIConnectionPool.(CVE-2020-36183) FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp.datasources.SharedPoolDataSource.(CVE-2020-36187) FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp.cpdsadapter.DriverAdapterCPDS.(CVE-2020-36181) FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp.datasources.PerUserPoolDataSource.(CVE-2020-36186) FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to org.apache.commons.dbcp2.cpdsadapter.DriverAdapterCPDS.(CVE-2020-36180) FasterXML jackson-databind 2.x before 2.9.10.8 mish…

 https://cve.radiocsirt.org/vuln/opensuse-su-2024:10868-1 openSUSE-SU-2024:10868-1 — jackson-databind-2.10.5.1-2.2 on GA media 2026-10-03T04:03:08.174485+00:00

jackson-databind-2.10.5.1-2.2 on GA media

 https://cve.radiocsirt.org/vuln/rhsa-2021:1230 RHSA-2021:1230 — Red Hat Security Advisory: OpenShift Container Platform 4.6.26 security and extras update 2026-10-03T04:03:08.174511+00:00

jackson-databind: arbitrary code execution in slf4j-ext class jackson-databind: arbitrary code execution in blaze-ds-opt and blaze-ds-core classes jackson-databind: exfiltration/XXE in some JDK classes jackson-databind: server-side request forgery (SSRF) in axis2-jaxws class jackson-databind: improper polymorphic deserialization in axis2-transport-jms class jackson-databind: improper polymorphic deserialization in openjpa class jackson-databind: improper polymorphic deserialization in jboss-common-core class jackson-databind: default typing mishandling leading to remote code execution jackson-databind: Serialization gadgets in com.pastdev.httpcomponents.configuration.JndiConfiguration jackson-databind: mishandles the interaction between serialization gadgets and typing, related to org.apache.commons.dbcp2.datasources.PerUserPoolDataSource jackson-databind: mishandles the interaction between serialization gadgets and typing, related to org.apache.commons.dbcp2.datasources.SharedPoolDataSource jackson-databind: mishandles the interaction between serialization gadgets and typing, related to com.oracle.wls.shaded.org.apache.xalan.lib.sql.JNDIConnectionPool jackson-databind: mishandles the interaction between serialization gadgets and typing, related to oadd.org.apache.commons.dbcp.cpdsadapter.DriverAdapterCPDS jackson-databind: mishandles the interaction between serialization gadgets and typing, related to org.apache.commons.dbcp2.cpdsadapter.DriverAdapterCPDS jackson-databind:…

 https://cve.radiocsirt.org/vuln/suse-su-2021:0243-1 SUSE-SU-2021:0243-1 — Security update for jackson-databind 2026-10-03T04:03:08.174567+00:00

Security update for jackson-databind

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2021-20190 UBUNTU-CVE-2021-20190 2026-10-03T04:03:08.174583+00:00

Affected: Ubuntu:Pro:14.04:LTS: jackson-databind, Ubuntu:Pro:16.04:LTS: jackson-databind, Ubuntu:18.04:LTS: jackson-databind, Ubuntu:20.04:LTS: jackson-databind, Ubuntu:22.04:LTS: jackson-databind

A flaw was found in jackson-databind before 2.9.10.7. FasterXML mishandles the interaction between serialization gadgets and typing. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-0794 WID-SEC-W-2024-0794 — Dell ECS: Mehrere Schwachstellen 2026-10-03T04:03:08.174607+00:00

Ein Angreifer kann mehrere Schwachstellen in Dell ECS ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuführen, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuführen, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuführen.