FasterXML jackson-modules-java8 vulnerabilities

Latest FasterXML jackson-modules-java8 CVEs

Newest publication first

1. CVE-2018-1000873 Moderate severity vulnerability that affects com.fasterxml.jackson.datatype:jackson-datatype-jsr353

   Published 2018-12-20

   Medium·CVSS 6.5 EPSS 4.8%

   Fasterxml Jackson version Before 2.9.8 contains a CWE-20: Improper Input Validation vulnerability in Jackson-Modules-Java8 that can result in Causes a denial-of-service (DoS). This attack appear to be exploitable via The victim deserializes malicious input, specifically very larg...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.