{"id":362724,"url":"https://github.com/FasterXML/jackson-databind","last_synced_at":"2026-06-20T07:01:10.408Z","repository":{"id":2098093,"uuid":"3038937","full_name":"FasterXML/jackson-databind","owner":"FasterXML","description":"General data-binding package for Jackson: works on streaming API (core) implementation(s)","archived":false,"fork":false,"pushed_at":"2026-06-01T00:15:18.000Z","size":88472,"stargazers_count":3724,"open_issues_count":115,"forks_count":1492,"subscribers_count":161,"default_branch":"3.x","last_synced_at":"2026-06-01T02:09:28.943Z","etag":null,"topics":["hacktoberfest","jackson","jackson-databind","json"],"latest_commit_sha":null,"homepage":"","language":"Java","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/FasterXML.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":".github/FUNDING.yml","license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null},"funding":{"tidelift":"maven/com.fasterxml.jackson.core:jackson-databind","github":"cowtowncoder"}},"created_at":"2011-12-23T07:17:41.000Z","updated_at":"2026-05-29T20:44:06.000Z","dependencies_parsed_at":"2024-05-29T03:58:02.675Z","dependency_job_id":"c6e6c367-12dc-41ef-bd16-20ba414f4043","html_url":"https://github.com/FasterXML/jackson-databind","commit_stats":{"total_commits":6633,"total_committers":286,"mean_commits":"23.192307692307693","dds":0.148047640584954,"last_synced_commit":"bb5b3cc63a5a5594e3fe0d4fd105acffaa09b30a"},"previous_names":[],"tags_count":246,"template":false,"template_full_name":null,"purl":"pkg:github/FasterXML/jackson-databind","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/FasterXML","download_url":"https://codeload.github.com/FasterXML/jackson-databind/tar.gz/refs/heads/3.x","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/sbom","scorecard":{"id":49363,"data":{"date":"2025-08-11","repo":{"name":"github.com/FasterXML/jackson-databind","commit":"abe7a7803535b6adf387ee0e78d6a3c8660d416a"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":7.9,"checks":[{"name":"Code-Review","score":0,"reason":"Found 1/29 approved changesets -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Maintained","score":10,"reason":"30 commit(s) and 25 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Token-Permissions","score":10,"reason":"GitHub workflow tokens follow principle of least privilege","details":["Info: jobLevel 'actions' permission set to 'read': .github/workflows/codeql-analysis.yml:15","Info: jobLevel 'contents' permission set to 'read': .github/workflows/codeql-analysis.yml:16","Info: topLevel 'contents' permission set to 'read': .github/workflows/cifuzz.yml:8","Info: topLevel 'contents' permission set to 'read': .github/workflows/codeql-analysis.yml:8","Info: topLevel 'contents' permission set to 'read': .github/workflows/dep_build_v2.yml:9","Info: topLevel 'contents' permission set to 'read': .github/workflows/dep_build_v3.yml:9","Info: topLevel 'contents' permission set to 'read': .github/workflows/main.yml:13","Info: topLevel 'contents' permission set to 'read': .github/workflows/trigger_dep_builds_v2.yml:8","Info: topLevel 'contents' permission set to 'read': .github/workflows/trigger_dep_builds_v3.yml:8","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Pinned-Dependencies","score":7,"reason":"dependency not pinned by hash detected -- score normalized to 7","details":["Warn: third-party GitHubAction not pinned by hash: .github/workflows/cifuzz.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/FasterXML/jackson-databind/cifuzz.yml/2.x?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cifuzz.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/FasterXML/jackson-databind/cifuzz.yml/2.x?enable=pin","Info:  11 out of  11 GitHub-owned GitHubAction dependencies pinned","Info:   3 out of   5 third-party GitHubAction dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Fuzzing","score":10,"reason":"project is fuzzed","details":["Info: OSSFuzz integration found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":3,"reason":"branch protection is not maximal on development and all release branches","details":["Info: 'allow deletion' disabled on branch '2.x'","Info: 'force pushes' disabled on branch '2.x'","Warn: branch '2.x' does not require approvers","Warn: codeowners review is not required on branch '2.x'","Warn: no status checks found to merge onto branch '2.x'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Packaging","score":10,"reason":"packaging workflow detected","details":["Info: Project packages its releases by way of GitHub Actions.: .github/workflows/main.yml:16"],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"SAST","score":7,"reason":"SAST tool detected but not run on all commits","details":["Info: SAST configuration detected: CodeQL","Warn: 0 commits out of 5 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-08-14T23:24:41.015Z","repository_id":2098093,"created_at":"2025-08-14T23:24:41.015Z","updated_at":"2025-08-14T23:24:41.015Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":33883102,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-05-26T15:22:16.424Z","status":"online","status_checked_at":"2026-06-03T02:00:06.370Z","response_time":59,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"owner":{"login":"FasterXML","name":"FasterXML, LLC","uuid":"382692","kind":"organization","description":null,"email":"info@fasterxml.com","website":"http://fasterxml.com","location":"Seattle, WA","twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/382692?v=4","repositories_count":68,"last_synced_at":"2023-04-14T17:44:54.358Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/FasterXML","funding_links":[],"total_stars":null,"followers":null,"following":null,"created_at":"2022-11-02T18:09:50.546Z","updated_at":"2023-04-14T17:44:54.918Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/FasterXML","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/FasterXML/repositories"},"packages":[{"id":4727525,"name":"com.jwebmp.jackson.core:jackson-databind","ecosystem":"maven","description":"General data-binding functionality for Jackson: works on core streaming API","homepage":"http://github.com/FasterXML/jackson","licenses":"The Apache Software License, Version 2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/FasterXML/jackson-databind","keywords_array":[],"namespace":"com.jwebmp.jackson.core","versions_count":9,"first_release_published_at":"2018-12-19T01:25:33.000Z","latest_release_published_at":"2019-04-10T10:57:08.000Z","latest_release_number":"0.66.0.1","last_synced_at":"2026-05-04T14:02:53.121Z","created_at":"2022-07-25T23:13:58.546Z","updated_at":"2026-05-04T14:02:53.121Z","registry_url":"https://central.sonatype.com/artifact/com.jwebmp.jackson.core/jackson-databind/","install_command":null,"documentation_url":"https://appdoc.app/artifact/com.jwebmp.jackson.core/jackson-databind/","metadata":{"distribution_repositories":["https://jwebmp.com/artifactory/libs-release-local","https://oss.sonatype.org/service/local/staging/deploy/maven2/","https://jwebmp.com/artifactory/libs-snapshot-local","https://oss.sonatype.org/content/repositories/snapshots/"]},"repo_metadata":{"id":2098093,"uuid":"3038937","full_name":"FasterXML/jackson-databind","owner":"FasterXML","description":"General data-binding package for Jackson (2.x): works on streaming API (core) implementation(s)","archived":false,"fork":false,"pushed_at":"2025-10-16T14:06:13.000Z","size":83751,"stargazers_count":3633,"open_issues_count":376,"forks_count":1440,"subscribers_count":167,"default_branch":"3.x","last_synced_at":"2025-10-16T15:04:08.916Z","etag":null,"topics":["hacktoberfest","jackson","jackson-databind","json"],"latest_commit_sha":null,"homepage":"","language":"Java","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/FasterXML.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":".github/FUNDING.yml","license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null},"funding":{"tidelift":"maven/com.fasterxml.jackson.core:jackson-databind","github":"cowtowncoder"}},"created_at":"2011-12-23T07:17:41.000Z","updated_at":"2025-10-16T14:06:18.000Z","dependencies_parsed_at":"2024-05-29T03:58:02.675Z","dependency_job_id":"3774e870-3005-4977-b5e0-cbc50c6a4d09","html_url":"https://github.com/FasterXML/jackson-databind","commit_stats":{"total_commits":6633,"total_committers":286,"mean_commits":"23.192307692307693","dds":0.148047640584954,"last_synced_commit":"bb5b3cc63a5a5594e3fe0d4fd105acffaa09b30a"},"previous_names":[],"tags_count":222,"template":false,"template_full_name":null,"purl":"pkg:github/FasterXML/jackson-databind","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/FasterXML","download_url":"https://codeload.github.com/FasterXML/jackson-databind/tar.gz/refs/heads/3.x","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/sbom","scorecard":{"id":49363,"data":{"date":"2025-08-11","repo":{"name":"github.com/FasterXML/jackson-databind","commit":"abe7a7803535b6adf387ee0e78d6a3c8660d416a"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":7.9,"checks":[{"name":"Code-Review","score":0,"reason":"Found 1/29 approved changesets -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Maintained","score":10,"reason":"30 commit(s) and 25 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Token-Permissions","score":10,"reason":"GitHub workflow tokens follow principle of least privilege","details":["Info: jobLevel 'actions' permission set to 'read': .github/workflows/codeql-analysis.yml:15","Info: jobLevel 'contents' permission set to 'read': .github/workflows/codeql-analysis.yml:16","Info: topLevel 'contents' permission set to 'read': .github/workflows/cifuzz.yml:8","Info: topLevel 'contents' permission set to 'read': .github/workflows/codeql-analysis.yml:8","Info: topLevel 'contents' permission set to 'read': .github/workflows/dep_build_v2.yml:9","Info: topLevel 'contents' permission set to 'read': .github/workflows/dep_build_v3.yml:9","Info: topLevel 'contents' permission set to 'read': .github/workflows/main.yml:13","Info: topLevel 'contents' permission set to 'read': .github/workflows/trigger_dep_builds_v2.yml:8","Info: topLevel 'contents' permission set to 'read': .github/workflows/trigger_dep_builds_v3.yml:8","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Pinned-Dependencies","score":7,"reason":"dependency not pinned by hash detected -- score normalized to 7","details":["Warn: third-party GitHubAction not pinned by hash: .github/workflows/cifuzz.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/FasterXML/jackson-databind/cifuzz.yml/2.x?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cifuzz.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/FasterXML/jackson-databind/cifuzz.yml/2.x?enable=pin","Info:  11 out of  11 GitHub-owned GitHubAction dependencies pinned","Info:   3 out of   5 third-party GitHubAction dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Fuzzing","score":10,"reason":"project is fuzzed","details":["Info: OSSFuzz integration found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":3,"reason":"branch protection is not maximal on development and all release branches","details":["Info: 'allow deletion' disabled on branch '2.x'","Info: 'force pushes' disabled on branch '2.x'","Warn: branch '2.x' does not require approvers","Warn: codeowners review is not required on branch '2.x'","Warn: no status checks found to merge onto branch '2.x'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Packaging","score":10,"reason":"packaging workflow detected","details":["Info: Project packages its releases by way of GitHub Actions.: .github/workflows/main.yml:16"],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"SAST","score":7,"reason":"SAST tool detected but not run on all commits","details":["Info: SAST configuration detected: CodeQL","Warn: 0 commits out of 5 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-08-14T23:24:41.015Z","repository_id":2098093,"created_at":"2025-08-14T23:24:41.015Z","updated_at":"2025-08-14T23:24:41.015Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":279295207,"owners_count":26142067,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-10-17T02:00:07.504Z","response_time":56,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"FasterXML","name":"FasterXML, LLC","uuid":"382692","kind":"organization","description":null,"email":"info@fasterxml.com","website":"http://fasterxml.com","location":"Seattle, WA","twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/382692?v=4","repositories_count":68,"last_synced_at":"2023-04-14T17:44:54.358Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/FasterXML","funding_links":[],"total_stars":null,"followers":null,"following":null,"created_at":"2022-11-02T18:09:50.546Z","updated_at":"2023-04-14T17:44:54.918Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/FasterXML","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/FasterXML/repositories"},"tags":[]},"repo_metadata_updated_at":"2026-02-27T04:47:49.574Z","dependent_packages_count":10,"downloads":null,"downloads_period":null,"dependent_repos_count":7,"rankings":{"downloads":null,"dependent_repos_count":9.173479201731185,"dependent_packages_count":5.981405786647431,"stargazers_count":5.802877294221368,"forks_count":4.350805482087041,"docker_downloads_count":null,"average":6.327141941171757},"purl":"pkg:maven/com.jwebmp.jackson.core/jackson-databind","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/maven/com.jwebmp.jackson.core:jackson-databind","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/maven/com.jwebmp.jackson.core:jackson-databind","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/maven/com.jwebmp.jackson.core:jackson-databind/dependencies","status":"removed","funding_links":["https://tidelift.com/funding/github/maven/com.fasterxml.jackson.core:jackson-databind","https://github.com/sponsors/cowtowncoder"],"critical":null,"issue_metadata":{"last_synced_at":"2025-10-18T16:03:27.410Z","issues_count":728,"pull_requests_count":1007,"avg_time_to_close_issue":50249371.6536965,"avg_time_to_close_pull_request":2626094.3493975904,"issues_closed_count":514,"pull_requests_closed_count":913,"pull_request_authors_count":76,"issue_authors_count":479,"avg_comments_per_issue":4.913461538461538,"avg_comments_per_pull_request":1.7000993048659383,"merged_pull_requests_count":790,"bot_issues_count":1,"bot_pull_requests_count":50,"past_year_issues_count":231,"past_year_pull_requests_count":552,"past_year_avg_time_to_close_issue":840676.0331125828,"past_year_avg_time_to_close_pull_request":289946.1219512195,"past_year_issues_closed_count":151,"past_year_pull_requests_closed_count":492,"past_year_pull_request_authors_count":36,"past_year_issue_authors_count":126,"past_year_avg_comments_per_issue":3.0562770562770565,"past_year_avg_comments_per_pull_request":1.2952898550724639,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":19,"past_year_merged_pull_requests_count":442,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/issues","maintainers":[{"login":"cowtowncoder","count":502,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/cowtowncoder"},{"login":"JooHyukKim","count":237,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/JooHyukKim"},{"login":"pjfanning","count":128,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/pjfanning"},{"login":"yawkat","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/yawkat"},{"login":"divan-9","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/divan-9"},{"login":"christophercurrie","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/christophercurrie"},{"login":"khogeland","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/khogeland"}],"active_maintainers":[{"login":"cowtowncoder","count":316,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/cowtowncoder"},{"login":"JooHyukKim","count":131,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/JooHyukKim"},{"login":"pjfanning","count":62,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/pjfanning"},{"login":"yawkat","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/yawkat"},{"login":"divan-9","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/divan-9"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.jwebmp.jackson.core:jackson-databind/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.jwebmp.jackson.core:jackson-databind/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.jwebmp.jackson.core:jackson-databind/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.jwebmp.jackson.core:jackson-databind/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.jwebmp.jackson.core:jackson-databind/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.jwebmp.jackson.core:jackson-databind/codemeta","maintainers":[],"registry":{"name":"repo1.maven.org","url":"https://repo.maven.apache.org/maven2","ecosystem":"maven","default":true,"packages_count":608482,"maintainers_count":0,"namespaces_count":80807,"keywords_count":34879,"github":"maven-central","metadata":{"funded_packages_count":37828},"icon_url":"https://github.com/maven-central.png","created_at":"2022-07-21T16:40:13.074Z","updated_at":"2026-06-10T05:05:55.821Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/namespaces"}},{"id":4767714,"name":"com.jwebmp.jpms.jackson.core:jackson-databind","ecosystem":"maven","description":"General data-binding functionality for Jackson: works on core streaming API","homepage":"http://github.com/FasterXML/jackson","licenses":"The Apache Software License, Version 2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/FasterXML/jackson-databind","keywords_array":[],"namespace":"com.jwebmp.jpms.jackson.core","versions_count":11,"first_release_published_at":"2019-04-17T03:11:30.000Z","latest_release_published_at":"2019-08-09T11:50:33.000Z","latest_release_number":"0.68.0.1","last_synced_at":"2026-05-02T09:18:54.606Z","created_at":"2022-07-26T05:24:10.073Z","updated_at":"2026-05-02T09:18:54.606Z","registry_url":"https://central.sonatype.com/artifact/com.jwebmp.jpms.jackson.core/jackson-databind/","install_command":null,"documentation_url":"https://appdoc.app/artifact/com.jwebmp.jpms.jackson.core/jackson-databind/","metadata":{"distribution_repositories":["https://jwebmp.com/artifactory/libs-release-local","https://oss.sonatype.org/service/local/staging/deploy/maven2/","https://jwebmp.com/artifactory/libs-snapshot-local","https://oss.sonatype.org/content/repositories/snapshots/"]},"repo_metadata":{"id":2098093,"uuid":"3038937","full_name":"FasterXML/jackson-databind","owner":"FasterXML","description":"General data-binding package for Jackson (2.x): works on streaming API (core) implementation(s)","archived":false,"fork":false,"pushed_at":"2025-10-16T14:06:13.000Z","size":83751,"stargazers_count":3633,"open_issues_count":376,"forks_count":1440,"subscribers_count":167,"default_branch":"3.x","last_synced_at":"2025-10-16T15:04:08.916Z","etag":null,"topics":["hacktoberfest","jackson","jackson-databind","json"],"latest_commit_sha":null,"homepage":"","language":"Java","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/FasterXML.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":".github/FUNDING.yml","license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null},"funding":{"tidelift":"maven/com.fasterxml.jackson.core:jackson-databind","github":"cowtowncoder"}},"created_at":"2011-12-23T07:17:41.000Z","updated_at":"2025-10-16T14:06:18.000Z","dependencies_parsed_at":"2024-05-29T03:58:02.675Z","dependency_job_id":"3774e870-3005-4977-b5e0-cbc50c6a4d09","html_url":"https://github.com/FasterXML/jackson-databind","commit_stats":{"total_commits":6633,"total_committers":286,"mean_commits":"23.192307692307693","dds":0.148047640584954,"last_synced_commit":"bb5b3cc63a5a5594e3fe0d4fd105acffaa09b30a"},"previous_names":[],"tags_count":222,"template":false,"template_full_name":null,"purl":"pkg:github/FasterXML/jackson-databind","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/FasterXML","download_url":"https://codeload.github.com/FasterXML/jackson-databind/tar.gz/refs/heads/3.x","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/sbom","scorecard":{"id":49363,"data":{"date":"2025-08-11","repo":{"name":"github.com/FasterXML/jackson-databind","commit":"abe7a7803535b6adf387ee0e78d6a3c8660d416a"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":7.9,"checks":[{"name":"Code-Review","score":0,"reason":"Found 1/29 approved changesets -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Maintained","score":10,"reason":"30 commit(s) and 25 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Token-Permissions","score":10,"reason":"GitHub workflow tokens follow principle of least privilege","details":["Info: jobLevel 'actions' permission set to 'read': .github/workflows/codeql-analysis.yml:15","Info: jobLevel 'contents' permission set to 'read': .github/workflows/codeql-analysis.yml:16","Info: topLevel 'contents' permission set to 'read': .github/workflows/cifuzz.yml:8","Info: topLevel 'contents' permission set to 'read': .github/workflows/codeql-analysis.yml:8","Info: topLevel 'contents' permission set to 'read': .github/workflows/dep_build_v2.yml:9","Info: topLevel 'contents' permission set to 'read': .github/workflows/dep_build_v3.yml:9","Info: topLevel 'contents' permission set to 'read': .github/workflows/main.yml:13","Info: topLevel 'contents' permission set to 'read': .github/workflows/trigger_dep_builds_v2.yml:8","Info: topLevel 'contents' permission set to 'read': .github/workflows/trigger_dep_builds_v3.yml:8","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Pinned-Dependencies","score":7,"reason":"dependency not pinned by hash detected -- score normalized to 7","details":["Warn: third-party GitHubAction not pinned by hash: .github/workflows/cifuzz.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/FasterXML/jackson-databind/cifuzz.yml/2.x?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cifuzz.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/FasterXML/jackson-databind/cifuzz.yml/2.x?enable=pin","Info:  11 out of  11 GitHub-owned GitHubAction dependencies pinned","Info:   3 out of   5 third-party GitHubAction dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Fuzzing","score":10,"reason":"project is fuzzed","details":["Info: OSSFuzz integration found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":3,"reason":"branch protection is not maximal on development and all release branches","details":["Info: 'allow deletion' disabled on branch '2.x'","Info: 'force pushes' disabled on branch '2.x'","Warn: branch '2.x' does not require approvers","Warn: codeowners review is not required on branch '2.x'","Warn: no status checks found to merge onto branch '2.x'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Packaging","score":10,"reason":"packaging workflow detected","details":["Info: Project packages its releases by way of GitHub Actions.: .github/workflows/main.yml:16"],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"SAST","score":7,"reason":"SAST tool detected but not run on all commits","details":["Info: SAST configuration detected: CodeQL","Warn: 0 commits out of 5 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-08-14T23:24:41.015Z","repository_id":2098093,"created_at":"2025-08-14T23:24:41.015Z","updated_at":"2025-08-14T23:24:41.015Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":279295207,"owners_count":26142067,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-10-17T02:00:07.504Z","response_time":56,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"FasterXML","name":"FasterXML, LLC","uuid":"382692","kind":"organization","description":null,"email":"info@fasterxml.com","website":"http://fasterxml.com","location":"Seattle, WA","twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/382692?v=4","repositories_count":68,"last_synced_at":"2023-04-14T17:44:54.358Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/FasterXML","funding_links":[],"total_stars":null,"followers":null,"following":null,"created_at":"2022-11-02T18:09:50.546Z","updated_at":"2023-04-14T17:44:54.918Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/FasterXML","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/FasterXML/repositories"},"tags":[]},"repo_metadata_updated_at":"2026-02-27T04:47:38.162Z","dependent_packages_count":7,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":31.979943940947386,"dependent_packages_count":8.051315902994164,"stargazers_count":4.591866421349791,"forks_count":3.2646272193385673,"average":11.971938371157478},"purl":"pkg:maven/com.jwebmp.jpms.jackson.core/jackson-databind","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/maven/com.jwebmp.jpms.jackson.core:jackson-databind","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/maven/com.jwebmp.jpms.jackson.core:jackson-databind","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/maven/com.jwebmp.jpms.jackson.core:jackson-databind/dependencies","status":null,"funding_links":["https://tidelift.com/funding/github/maven/com.fasterxml.jackson.core:jackson-databind","https://github.com/sponsors/cowtowncoder"],"critical":null,"issue_metadata":{"last_synced_at":"2025-10-18T16:03:27.410Z","issues_count":728,"pull_requests_count":1007,"avg_time_to_close_issue":50249371.6536965,"avg_time_to_close_pull_request":2626094.3493975904,"issues_closed_count":514,"pull_requests_closed_count":913,"pull_request_authors_count":76,"issue_authors_count":479,"avg_comments_per_issue":4.913461538461538,"avg_comments_per_pull_request":1.7000993048659383,"merged_pull_requests_count":790,"bot_issues_count":1,"bot_pull_requests_count":50,"past_year_issues_count":231,"past_year_pull_requests_count":552,"past_year_avg_time_to_close_issue":840676.0331125828,"past_year_avg_time_to_close_pull_request":289946.1219512195,"past_year_issues_closed_count":151,"past_year_pull_requests_closed_count":492,"past_year_pull_request_authors_count":36,"past_year_issue_authors_count":126,"past_year_avg_comments_per_issue":3.0562770562770565,"past_year_avg_comments_per_pull_request":1.2952898550724639,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":19,"past_year_merged_pull_requests_count":442,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/issues","maintainers":[{"login":"cowtowncoder","count":502,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/cowtowncoder"},{"login":"JooHyukKim","count":237,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/JooHyukKim"},{"login":"pjfanning","count":128,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/pjfanning"},{"login":"yawkat","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/yawkat"},{"login":"divan-9","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/divan-9"},{"login":"christophercurrie","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/christophercurrie"},{"login":"khogeland","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/khogeland"}],"active_maintainers":[{"login":"cowtowncoder","count":316,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/cowtowncoder"},{"login":"JooHyukKim","count":131,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/JooHyukKim"},{"login":"pjfanning","count":62,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/pjfanning"},{"login":"yawkat","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/yawkat"},{"login":"divan-9","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/divan-9"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.jwebmp.jpms.jackson.core:jackson-databind/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.jwebmp.jpms.jackson.core:jackson-databind/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.jwebmp.jpms.jackson.core:jackson-databind/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.jwebmp.jpms.jackson.core:jackson-databind/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.jwebmp.jpms.jackson.core:jackson-databind/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.jwebmp.jpms.jackson.core:jackson-databind/codemeta","maintainers":[],"registry":{"name":"repo1.maven.org","url":"https://repo.maven.apache.org/maven2","ecosystem":"maven","default":true,"packages_count":608482,"maintainers_count":0,"namespaces_count":80807,"keywords_count":34879,"github":"maven-central","metadata":{"funded_packages_count":37828},"icon_url":"https://github.com/maven-central.png","created_at":"2022-07-21T16:40:13.074Z","updated_at":"2026-06-10T05:05:55.821Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/namespaces"}},{"id":4727650,"name":"com.jwebmp.jre11.jackson.core:jackson-databind","ecosystem":"maven","description":"General data-binding functionality for Jackson: works on core streaming API","homepage":"http://github.com/FasterXML/jackson","licenses":"The Apache Software License, Version 2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/FasterXML/jackson-databind","keywords_array":[],"namespace":"com.jwebmp.jre11.jackson.core","versions_count":2,"first_release_published_at":"2018-12-19T01:27:29.000Z","latest_release_published_at":"2018-12-20T00:48:29.000Z","latest_release_number":"0.63.0.19","last_synced_at":"2026-06-05T23:46:11.433Z","created_at":"2022-07-25T23:14:23.106Z","updated_at":"2026-06-05T23:46:11.434Z","registry_url":"https://central.sonatype.com/artifact/com.jwebmp.jre11.jackson.core/jackson-databind/","install_command":null,"documentation_url":"https://appdoc.app/artifact/com.jwebmp.jre11.jackson.core/jackson-databind/","metadata":{"distribution_repositories":["https://jwebmp.com/artifactory/libs-release-local","https://oss.sonatype.org/service/local/staging/deploy/maven2/","https://jwebmp.com/artifactory/libs-snapshot-local","https://oss.sonatype.org/content/repositories/snapshots/"]},"repo_metadata":{"id":2098093,"uuid":"3038937","full_name":"FasterXML/jackson-databind","owner":"FasterXML","description":"General data-binding package for Jackson (2.x): works on streaming API (core) implementation(s)","archived":false,"fork":false,"pushed_at":"2025-10-16T14:06:13.000Z","size":83751,"stargazers_count":3633,"open_issues_count":376,"forks_count":1440,"subscribers_count":167,"default_branch":"3.x","last_synced_at":"2025-10-16T15:04:08.916Z","etag":null,"topics":["hacktoberfest","jackson","jackson-databind","json"],"latest_commit_sha":null,"homepage":"","language":"Java","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/FasterXML.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":".github/FUNDING.yml","license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null},"funding":{"tidelift":"maven/com.fasterxml.jackson.core:jackson-databind","github":"cowtowncoder"}},"created_at":"2011-12-23T07:17:41.000Z","updated_at":"2025-10-16T14:06:18.000Z","dependencies_parsed_at":"2024-05-29T03:58:02.675Z","dependency_job_id":"3774e870-3005-4977-b5e0-cbc50c6a4d09","html_url":"https://github.com/FasterXML/jackson-databind","commit_stats":{"total_commits":6633,"total_committers":286,"mean_commits":"23.192307692307693","dds":0.148047640584954,"last_synced_commit":"bb5b3cc63a5a5594e3fe0d4fd105acffaa09b30a"},"previous_names":[],"tags_count":222,"template":false,"template_full_name":null,"purl":"pkg:github/FasterXML/jackson-databind","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/FasterXML","download_url":"https://codeload.github.com/FasterXML/jackson-databind/tar.gz/refs/heads/3.x","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/sbom","scorecard":{"id":49363,"data":{"date":"2025-08-11","repo":{"name":"github.com/FasterXML/jackson-databind","commit":"abe7a7803535b6adf387ee0e78d6a3c8660d416a"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":7.9,"checks":[{"name":"Code-Review","score":0,"reason":"Found 1/29 approved changesets -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Maintained","score":10,"reason":"30 commit(s) and 25 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Token-Permissions","score":10,"reason":"GitHub workflow tokens follow principle of least privilege","details":["Info: jobLevel 'actions' permission set to 'read': .github/workflows/codeql-analysis.yml:15","Info: jobLevel 'contents' permission set to 'read': .github/workflows/codeql-analysis.yml:16","Info: topLevel 'contents' permission set to 'read': .github/workflows/cifuzz.yml:8","Info: topLevel 'contents' permission set to 'read': .github/workflows/codeql-analysis.yml:8","Info: topLevel 'contents' permission set to 'read': .github/workflows/dep_build_v2.yml:9","Info: topLevel 'contents' permission set to 'read': .github/workflows/dep_build_v3.yml:9","Info: topLevel 'contents' permission set to 'read': .github/workflows/main.yml:13","Info: topLevel 'contents' permission set to 'read': .github/workflows/trigger_dep_builds_v2.yml:8","Info: topLevel 'contents' permission set to 'read': .github/workflows/trigger_dep_builds_v3.yml:8","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Pinned-Dependencies","score":7,"reason":"dependency not pinned by hash detected -- score normalized to 7","details":["Warn: third-party GitHubAction not pinned by hash: .github/workflows/cifuzz.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/FasterXML/jackson-databind/cifuzz.yml/2.x?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cifuzz.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/FasterXML/jackson-databind/cifuzz.yml/2.x?enable=pin","Info:  11 out of  11 GitHub-owned GitHubAction dependencies pinned","Info:   3 out of   5 third-party GitHubAction dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Fuzzing","score":10,"reason":"project is fuzzed","details":["Info: OSSFuzz integration found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":3,"reason":"branch protection is not maximal on development and all release branches","details":["Info: 'allow deletion' disabled on branch '2.x'","Info: 'force pushes' disabled on branch '2.x'","Warn: branch '2.x' does not require approvers","Warn: codeowners review is not required on branch '2.x'","Warn: no status checks found to merge onto branch '2.x'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Packaging","score":10,"reason":"packaging workflow detected","details":["Info: Project packages its releases by way of GitHub Actions.: .github/workflows/main.yml:16"],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"SAST","score":7,"reason":"SAST tool detected but not run on all commits","details":["Info: SAST configuration detected: CodeQL","Warn: 0 commits out of 5 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-08-14T23:24:41.015Z","repository_id":2098093,"created_at":"2025-08-14T23:24:41.015Z","updated_at":"2025-08-14T23:24:41.015Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":279295207,"owners_count":26142067,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-10-17T02:00:07.504Z","response_time":56,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"FasterXML","name":"FasterXML, LLC","uuid":"382692","kind":"organization","description":null,"email":"info@fasterxml.com","website":"http://fasterxml.com","location":"Seattle, WA","twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/382692?v=4","repositories_count":68,"last_synced_at":"2023-04-14T17:44:54.358Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/FasterXML","funding_links":[],"total_stars":null,"followers":null,"following":null,"created_at":"2022-11-02T18:09:50.546Z","updated_at":"2023-04-14T17:44:54.918Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/FasterXML","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/FasterXML/repositories"},"tags":[]},"repo_metadata_updated_at":"2026-02-27T04:47:03.309Z","dependent_packages_count":2,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":31.979943940947386,"dependent_packages_count":22.360619819704137,"stargazers_count":4.591866421349791,"forks_count":3.2646272193385673,"average":15.54926435033497},"purl":"pkg:maven/com.jwebmp.jre11.jackson.core/jackson-databind","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/maven/com.jwebmp.jre11.jackson.core:jackson-databind","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/maven/com.jwebmp.jre11.jackson.core:jackson-databind","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/maven/com.jwebmp.jre11.jackson.core:jackson-databind/dependencies","status":null,"funding_links":["https://tidelift.com/funding/github/maven/com.fasterxml.jackson.core:jackson-databind","https://github.com/sponsors/cowtowncoder"],"critical":null,"issue_metadata":{"last_synced_at":"2025-10-18T16:03:27.410Z","issues_count":728,"pull_requests_count":1007,"avg_time_to_close_issue":50249371.6536965,"avg_time_to_close_pull_request":2626094.3493975904,"issues_closed_count":514,"pull_requests_closed_count":913,"pull_request_authors_count":76,"issue_authors_count":479,"avg_comments_per_issue":4.913461538461538,"avg_comments_per_pull_request":1.7000993048659383,"merged_pull_requests_count":790,"bot_issues_count":1,"bot_pull_requests_count":50,"past_year_issues_count":231,"past_year_pull_requests_count":552,"past_year_avg_time_to_close_issue":840676.0331125828,"past_year_avg_time_to_close_pull_request":289946.1219512195,"past_year_issues_closed_count":151,"past_year_pull_requests_closed_count":492,"past_year_pull_request_authors_count":36,"past_year_issue_authors_count":126,"past_year_avg_comments_per_issue":3.0562770562770565,"past_year_avg_comments_per_pull_request":1.2952898550724639,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":19,"past_year_merged_pull_requests_count":442,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/issues","maintainers":[{"login":"cowtowncoder","count":502,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/cowtowncoder"},{"login":"JooHyukKim","count":237,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/JooHyukKim"},{"login":"pjfanning","count":128,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/pjfanning"},{"login":"yawkat","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/yawkat"},{"login":"divan-9","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/divan-9"},{"login":"christophercurrie","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/christophercurrie"},{"login":"khogeland","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/khogeland"}],"active_maintainers":[{"login":"cowtowncoder","count":316,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/cowtowncoder"},{"login":"JooHyukKim","count":131,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/JooHyukKim"},{"login":"pjfanning","count":62,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/pjfanning"},{"login":"yawkat","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/yawkat"},{"login":"divan-9","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/divan-9"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.jwebmp.jre11.jackson.core:jackson-databind/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.jwebmp.jre11.jackson.core:jackson-databind/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.jwebmp.jre11.jackson.core:jackson-databind/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.jwebmp.jre11.jackson.core:jackson-databind/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.jwebmp.jre11.jackson.core:jackson-databind/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.jwebmp.jre11.jackson.core:jackson-databind/codemeta","maintainers":[],"registry":{"name":"repo1.maven.org","url":"https://repo.maven.apache.org/maven2","ecosystem":"maven","default":true,"packages_count":608482,"maintainers_count":0,"namespaces_count":80807,"keywords_count":34879,"github":"maven-central","metadata":{"funded_packages_count":37828},"icon_url":"https://github.com/maven-central.png","created_at":"2022-07-21T16:40:13.074Z","updated_at":"2026-06-10T05:05:55.821Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/namespaces"}},{"id":14508633,"name":"dev-java/jackson-databind","ecosystem":"gentoo","description":"General data-binding functionality for Jackson: works on core streaming API","homepage":"https://github.com/FasterXML/jackson-databind","licenses":"Apache-2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/FasterXML/jackson-databind","keywords_array":["amd64","arm64","ppc64"],"namespace":"dev-java","versions_count":2,"first_release_published_at":"2026-01-25T14:41:24.000Z","latest_release_published_at":"2026-01-25T14:41:24.000Z","latest_release_number":"2.20.0","last_synced_at":"2026-05-27T01:31:11.473Z","created_at":"2026-05-27T01:31:11.015Z","updated_at":"2026-05-27T02:07:40.840Z","registry_url":"https://packages.gentoo.org/packages/dev-java/jackson-databind","install_command":"emerge dev-java/jackson-databind","documentation_url":"https://packages.gentoo.org/packages/dev-java/jackson-databind","metadata":{"category":"dev-java","slot":"1","eapi":"8","inherit":"java-pkg-2 java-pkg-simple","iuse":"doc source"},"repo_metadata":{},"repo_metadata_updated_at":"2026-05-27T01:31:11.872Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":0.0,"dependent_packages_count":0.0,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":100},"purl":"pkg:gentoo/dev-java/jackson-databind","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/gentoo/dev-java/jackson-databind","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/gentoo/dev-java/jackson-databind","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/gentoo/dev-java/jackson-databind/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":null,"versions_url":"https://packages.ecosyste.ms/api/v1/registries/gentoo-portage/packages/dev-java%2Fjackson-databind/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/gentoo-portage/packages/dev-java%2Fjackson-databind/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/gentoo-portage/packages/dev-java%2Fjackson-databind/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/gentoo-portage/packages/dev-java%2Fjackson-databind/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/gentoo-portage/packages/dev-java%2Fjackson-databind/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/gentoo-portage/packages/dev-java%2Fjackson-databind/codemeta","maintainers":[],"registry":{"name":"gentoo-portage","url":"https://packages.gentoo.org/","ecosystem":"gentoo","default":true,"packages_count":19339,"maintainers_count":0,"namespaces_count":174,"keywords_count":382,"github":"gentoo","metadata":{"snapshot_url":"https://distfiles.gentoo.org/snapshots/portage-latest.tar.xz","funded_packages_count":77},"icon_url":"https://github.com/gentoo.png","created_at":"2026-05-26T08:59:24.155Z","updated_at":"2026-06-10T05:04:01.738Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/gentoo-portage/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/gentoo-portage/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/gentoo-portage/namespaces"}},{"id":11673692,"name":"tools.jackson.core:jackson-databind","ecosystem":"maven","description":"General data-binding functionality for Jackson: works on core streaming API","homepage":"https://github.com/FasterXML/jackson","licenses":"The Apache Software License, Version 2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/FasterXML/jackson-databind","keywords_array":[],"namespace":"tools.jackson.core","versions_count":20,"first_release_published_at":"2025-03-08T00:21:05.000Z","latest_release_published_at":"2026-05-01T17:34:45.000Z","latest_release_number":"3.1.3","last_synced_at":"2026-06-03T04:02:01.311Z","created_at":"2025-05-22T17:02:08.153Z","updated_at":"2026-06-03T04:02:01.312Z","registry_url":"https://central.sonatype.com/artifact/tools.jackson.core/jackson-databind/","install_command":null,"documentation_url":"https://appdoc.app/artifact/tools.jackson.core/jackson-databind/","metadata":{"repositories":["https://central.sonatype.com/repository/maven-snapshots"]},"repo_metadata":{"id":2098093,"uuid":"3038937","full_name":"FasterXML/jackson-databind","owner":"FasterXML","description":"General data-binding package for Jackson (2.x): works on streaming API (core) implementation(s)","archived":false,"fork":false,"pushed_at":"2025-10-16T14:06:13.000Z","size":83751,"stargazers_count":3633,"open_issues_count":376,"forks_count":1440,"subscribers_count":167,"default_branch":"3.x","last_synced_at":"2025-10-16T15:04:08.916Z","etag":null,"topics":["hacktoberfest","jackson","jackson-databind","json"],"latest_commit_sha":null,"homepage":"","language":"Java","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/FasterXML.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":".github/FUNDING.yml","license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null},"funding":{"tidelift":"maven/com.fasterxml.jackson.core:jackson-databind","github":"cowtowncoder"}},"created_at":"2011-12-23T07:17:41.000Z","updated_at":"2025-10-16T14:06:18.000Z","dependencies_parsed_at":"2024-05-29T03:58:02.675Z","dependency_job_id":"3774e870-3005-4977-b5e0-cbc50c6a4d09","html_url":"https://github.com/FasterXML/jackson-databind","commit_stats":{"total_commits":6633,"total_committers":286,"mean_commits":"23.192307692307693","dds":0.148047640584954,"last_synced_commit":"bb5b3cc63a5a5594e3fe0d4fd105acffaa09b30a"},"previous_names":[],"tags_count":222,"template":false,"template_full_name":null,"purl":"pkg:github/FasterXML/jackson-databind","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/FasterXML","download_url":"https://codeload.github.com/FasterXML/jackson-databind/tar.gz/refs/heads/3.x","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/sbom","scorecard":{"id":49363,"data":{"date":"2025-08-11","repo":{"name":"github.com/FasterXML/jackson-databind","commit":"abe7a7803535b6adf387ee0e78d6a3c8660d416a"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":7.9,"checks":[{"name":"Code-Review","score":0,"reason":"Found 1/29 approved changesets -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Maintained","score":10,"reason":"30 commit(s) and 25 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Token-Permissions","score":10,"reason":"GitHub workflow tokens follow principle of least privilege","details":["Info: jobLevel 'actions' permission set to 'read': .github/workflows/codeql-analysis.yml:15","Info: jobLevel 'contents' permission set to 'read': .github/workflows/codeql-analysis.yml:16","Info: topLevel 'contents' permission set to 'read': .github/workflows/cifuzz.yml:8","Info: topLevel 'contents' permission set to 'read': .github/workflows/codeql-analysis.yml:8","Info: topLevel 'contents' permission set to 'read': .github/workflows/dep_build_v2.yml:9","Info: topLevel 'contents' permission set to 'read': .github/workflows/dep_build_v3.yml:9","Info: topLevel 'contents' permission set to 'read': .github/workflows/main.yml:13","Info: topLevel 'contents' permission set to 'read': .github/workflows/trigger_dep_builds_v2.yml:8","Info: topLevel 'contents' permission set to 'read': .github/workflows/trigger_dep_builds_v3.yml:8","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Pinned-Dependencies","score":7,"reason":"dependency not pinned by hash detected -- score normalized to 7","details":["Warn: third-party GitHubAction not pinned by hash: .github/workflows/cifuzz.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/FasterXML/jackson-databind/cifuzz.yml/2.x?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cifuzz.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/FasterXML/jackson-databind/cifuzz.yml/2.x?enable=pin","Info:  11 out of  11 GitHub-owned GitHubAction dependencies pinned","Info:   3 out of   5 third-party GitHubAction dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Fuzzing","score":10,"reason":"project is fuzzed","details":["Info: OSSFuzz integration found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":3,"reason":"branch protection is not maximal on development and all release branches","details":["Info: 'allow deletion' disabled on branch '2.x'","Info: 'force pushes' disabled on branch '2.x'","Warn: branch '2.x' does not require approvers","Warn: codeowners review is not required on branch '2.x'","Warn: no status checks found to merge onto branch '2.x'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Packaging","score":10,"reason":"packaging workflow detected","details":["Info: Project packages its releases by way of GitHub Actions.: .github/workflows/main.yml:16"],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"SAST","score":7,"reason":"SAST tool detected but not run on all commits","details":["Info: SAST configuration detected: CodeQL","Warn: 0 commits out of 5 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-08-14T23:24:41.015Z","repository_id":2098093,"created_at":"2025-08-14T23:24:41.015Z","updated_at":"2025-08-14T23:24:41.015Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":279295207,"owners_count":26142067,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-10-17T02:00:07.504Z","response_time":56,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"FasterXML","name":"FasterXML, LLC","uuid":"382692","kind":"organization","description":null,"email":"info@fasterxml.com","website":"http://fasterxml.com","location":"Seattle, WA","twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/382692?v=4","repositories_count":68,"last_synced_at":"2023-04-14T17:44:54.358Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/FasterXML","funding_links":[],"total_stars":null,"followers":null,"following":null,"created_at":"2022-11-02T18:09:50.546Z","updated_at":"2023-04-14T17:44:54.918Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/FasterXML","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/FasterXML/repositories"},"tags":[]},"repo_metadata_updated_at":"2026-02-27T04:47:08.187Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":34.65778896544412,"dependent_packages_count":49.554576852919055,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":42.106182909181584},"purl":"pkg:maven/tools.jackson.core/jackson-databind","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/maven/tools.jackson.core:jackson-databind","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/maven/tools.jackson.core:jackson-databind","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/maven/tools.jackson.core:jackson-databind/dependencies","status":null,"funding_links":["https://tidelift.com/funding/github/maven/com.fasterxml.jackson.core:jackson-databind","https://github.com/sponsors/cowtowncoder"],"critical":null,"issue_metadata":{"last_synced_at":"2025-10-18T16:03:27.410Z","issues_count":728,"pull_requests_count":1007,"avg_time_to_close_issue":50249371.6536965,"avg_time_to_close_pull_request":2626094.3493975904,"issues_closed_count":514,"pull_requests_closed_count":913,"pull_request_authors_count":76,"issue_authors_count":479,"avg_comments_per_issue":4.913461538461538,"avg_comments_per_pull_request":1.7000993048659383,"merged_pull_requests_count":790,"bot_issues_count":1,"bot_pull_requests_count":50,"past_year_issues_count":231,"past_year_pull_requests_count":552,"past_year_avg_time_to_close_issue":840676.0331125828,"past_year_avg_time_to_close_pull_request":289946.1219512195,"past_year_issues_closed_count":151,"past_year_pull_requests_closed_count":492,"past_year_pull_request_authors_count":36,"past_year_issue_authors_count":126,"past_year_avg_comments_per_issue":3.0562770562770565,"past_year_avg_comments_per_pull_request":1.2952898550724639,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":19,"past_year_merged_pull_requests_count":442,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/issues","maintainers":[{"login":"cowtowncoder","count":502,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/cowtowncoder"},{"login":"JooHyukKim","count":237,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/JooHyukKim"},{"login":"pjfanning","count":128,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/pjfanning"},{"login":"yawkat","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/yawkat"},{"login":"divan-9","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/divan-9"},{"login":"christophercurrie","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/christophercurrie"},{"login":"khogeland","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/khogeland"}],"active_maintainers":[{"login":"cowtowncoder","count":316,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/cowtowncoder"},{"login":"JooHyukKim","count":131,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/JooHyukKim"},{"login":"pjfanning","count":62,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/pjfanning"},{"login":"yawkat","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/yawkat"},{"login":"divan-9","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/divan-9"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/tools.jackson.core:jackson-databind/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/tools.jackson.core:jackson-databind/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/tools.jackson.core:jackson-databind/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/tools.jackson.core:jackson-databind/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/tools.jackson.core:jackson-databind/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/tools.jackson.core:jackson-databind/codemeta","maintainers":[],"registry":{"name":"repo1.maven.org","url":"https://repo.maven.apache.org/maven2","ecosystem":"maven","default":true,"packages_count":608482,"maintainers_count":0,"namespaces_count":80807,"keywords_count":34879,"github":"maven-central","metadata":{"funded_packages_count":37828},"icon_url":"https://github.com/maven-central.png","created_at":"2022-07-21T16:40:13.074Z","updated_at":"2026-06-10T05:05:55.821Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/namespaces"}},{"id":13960614,"name":"java-fasterxml-jackson-databind","ecosystem":"guix","description":"Data-binding functionality and tree-model for the Jackson Data Processor","homepage":"https://github.com/FasterXML/jackson-databind","licenses":"asl2.0","normalized_licenses":["CERN-OHL-P-2.0"],"repository_url":"https://github.com/FasterXML/jackson-databind","keywords_array":[],"namespace":null,"versions_count":1,"first_release_published_at":"2026-03-02T22:01:19.583Z","latest_release_published_at":"2026-03-02T22:01:19.583Z","latest_release_number":"2.9.4","last_synced_at":"2026-04-27T17:48:50.974Z","created_at":"2026-03-02T22:01:19.395Z","updated_at":"2026-04-27T17:49:42.514Z","registry_url":"https://packages.guix.gnu.org/packages/java-fasterxml-jackson-databind/2.9.4/","install_command":"guix install java-fasterxml-jackson-databind","documentation_url":"https://git.savannah.gnu.org/cgit/guix.git/tree/gnu/packages/java.scm#n10367","metadata":{"location":"gnu/packages/java.scm:10367","variable_name":"java-fasterxml-jackson-databind"},"repo_metadata":{"id":2098093,"uuid":"3038937","full_name":"FasterXML/jackson-databind","owner":"FasterXML","description":"General data-binding package for Jackson: works on streaming API (core) implementation(s)","archived":false,"fork":false,"pushed_at":"2026-02-26T04:49:54.000Z","size":86065,"stargazers_count":3683,"open_issues_count":219,"forks_count":1466,"subscribers_count":164,"default_branch":"3.x","last_synced_at":"2026-02-26T08:49:02.552Z","etag":null,"topics":["hacktoberfest","jackson","jackson-databind","json"],"latest_commit_sha":null,"homepage":"","language":"Java","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/FasterXML.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":".github/FUNDING.yml","license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null},"funding":{"tidelift":"maven/com.fasterxml.jackson.core:jackson-databind","github":"cowtowncoder"}},"created_at":"2011-12-23T07:17:41.000Z","updated_at":"2026-02-26T04:49:57.000Z","dependencies_parsed_at":"2024-05-29T03:58:02.675Z","dependency_job_id":"c6e6c367-12dc-41ef-bd16-20ba414f4043","html_url":"https://github.com/FasterXML/jackson-databind","commit_stats":{"total_commits":6633,"total_committers":286,"mean_commits":"23.192307692307693","dds":0.148047640584954,"last_synced_commit":"bb5b3cc63a5a5594e3fe0d4fd105acffaa09b30a"},"previous_names":[],"tags_count":236,"template":false,"template_full_name":null,"purl":"pkg:github/FasterXML/jackson-databind","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/FasterXML","download_url":"https://codeload.github.com/FasterXML/jackson-databind/tar.gz/refs/heads/3.x","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/sbom","scorecard":{"id":49363,"data":{"date":"2025-08-11","repo":{"name":"github.com/FasterXML/jackson-databind","commit":"abe7a7803535b6adf387ee0e78d6a3c8660d416a"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":7.9,"checks":[{"name":"Code-Review","score":0,"reason":"Found 1/29 approved changesets -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Maintained","score":10,"reason":"30 commit(s) and 25 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Token-Permissions","score":10,"reason":"GitHub workflow tokens follow principle of least privilege","details":["Info: jobLevel 'actions' permission set to 'read': .github/workflows/codeql-analysis.yml:15","Info: jobLevel 'contents' permission set to 'read': .github/workflows/codeql-analysis.yml:16","Info: topLevel 'contents' permission set to 'read': .github/workflows/cifuzz.yml:8","Info: topLevel 'contents' permission set to 'read': .github/workflows/codeql-analysis.yml:8","Info: topLevel 'contents' permission set to 'read': .github/workflows/dep_build_v2.yml:9","Info: topLevel 'contents' permission set to 'read': .github/workflows/dep_build_v3.yml:9","Info: topLevel 'contents' permission set to 'read': .github/workflows/main.yml:13","Info: topLevel 'contents' permission set to 'read': .github/workflows/trigger_dep_builds_v2.yml:8","Info: topLevel 'contents' permission set to 'read': .github/workflows/trigger_dep_builds_v3.yml:8","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Pinned-Dependencies","score":7,"reason":"dependency not pinned by hash detected -- score normalized to 7","details":["Warn: third-party GitHubAction not pinned by hash: .github/workflows/cifuzz.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/FasterXML/jackson-databind/cifuzz.yml/2.x?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cifuzz.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/FasterXML/jackson-databind/cifuzz.yml/2.x?enable=pin","Info:  11 out of  11 GitHub-owned GitHubAction dependencies pinned","Info:   3 out of   5 third-party GitHubAction dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Fuzzing","score":10,"reason":"project is fuzzed","details":["Info: OSSFuzz integration found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":3,"reason":"branch protection is not maximal on development and all release branches","details":["Info: 'allow deletion' disabled on branch '2.x'","Info: 'force pushes' disabled on branch '2.x'","Warn: branch '2.x' does not require approvers","Warn: codeowners review is not required on branch '2.x'","Warn: no status checks found to merge onto branch '2.x'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Packaging","score":10,"reason":"packaging workflow detected","details":["Info: Project packages its releases by way of GitHub Actions.: .github/workflows/main.yml:16"],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"SAST","score":7,"reason":"SAST tool detected but not run on all commits","details":["Info: SAST configuration detected: CodeQL","Warn: 0 commits out of 5 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-08-14T23:24:41.015Z","repository_id":2098093,"created_at":"2025-08-14T23:24:41.015Z","updated_at":"2025-08-14T23:24:41.015Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":30021782,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-03-02T21:50:36.781Z","status":"ssl_error","status_checked_at":"2026-03-02T21:50:28.329Z","response_time":60,"last_error":"SSL_read: unexpected eof while reading","robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":false,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"repo_metadata_updated_at":"2026-04-27T17:49:42.275Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":0.0,"dependent_packages_count":0.0,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":100},"purl":"pkg:guix/java-fasterxml-jackson-databind","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/guix/java-fasterxml-jackson-databind","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/guix/java-fasterxml-jackson-databind","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/guix/java-fasterxml-jackson-databind/dependencies","status":null,"funding_links":["https://tidelift.com/funding/github/maven/com.fasterxml.jackson.core:jackson-databind","https://github.com/sponsors/cowtowncoder"],"critical":null,"issue_metadata":{"last_synced_at":"2026-03-02T06:01:43.755Z","issues_count":730,"pull_requests_count":1020,"avg_time_to_close_issue":50152005.33009709,"avg_time_to_close_pull_request":2637764.5588235296,"issues_closed_count":515,"pull_requests_closed_count":918,"pull_request_authors_count":80,"issue_authors_count":480,"avg_comments_per_issue":4.947945205479452,"avg_comments_per_pull_request":1.7568627450980392,"merged_pull_requests_count":792,"bot_issues_count":1,"bot_pull_requests_count":51,"past_year_issues_count":139,"past_year_pull_requests_count":303,"past_year_avg_time_to_close_issue":723291.3170731707,"past_year_avg_time_to_close_pull_request":383995.4696356275,"past_year_issues_closed_count":82,"past_year_pull_requests_closed_count":247,"past_year_pull_request_authors_count":25,"past_year_issue_authors_count":73,"past_year_avg_comments_per_issue":3.446043165467626,"past_year_avg_comments_per_pull_request":1.4059405940594059,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":11,"past_year_merged_pull_requests_count":217,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/issues","maintainers":[{"login":"cowtowncoder","count":503,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/cowtowncoder"},{"login":"JooHyukKim","count":240,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/JooHyukKim"},{"login":"pjfanning","count":128,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/pjfanning"},{"login":"yawkat","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/yawkat"},{"login":"divan-9","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/divan-9"},{"login":"christophercurrie","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/christophercurrie"},{"login":"khogeland","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/khogeland"}],"active_maintainers":[{"login":"cowtowncoder","count":169,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/cowtowncoder"},{"login":"JooHyukKim","count":68,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/JooHyukKim"},{"login":"pjfanning","count":33,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/pjfanning"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/guix/packages/java-fasterxml-jackson-databind/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/guix/packages/java-fasterxml-jackson-databind/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/guix/packages/java-fasterxml-jackson-databind/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/guix/packages/java-fasterxml-jackson-databind/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/guix/packages/java-fasterxml-jackson-databind/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/guix/packages/java-fasterxml-jackson-databind/codemeta","maintainers":[],"registry":{"name":"guix","url":"https://guix.gnu.org","ecosystem":"guix","default":true,"packages_count":31787,"maintainers_count":0,"namespaces_count":0,"keywords_count":1627,"github":"guix-mirror","metadata":{"funded_packages_count":368},"icon_url":"https://github.com/guix-mirror.png","created_at":"2026-03-02T16:23:46.981Z","updated_at":"2026-06-10T05:17:25.224Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/guix/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/guix/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/guix/namespaces"}},{"id":12621867,"name":"org.fasterxml.jackson.core:jackson-databind","ecosystem":"maven","description":"General data-binding functionality for Jackson: works on core streaming API","homepage":"https://github.com/FasterXML/jackson","licenses":"The Apache Software License, Version 2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/FasterXML/jackson-databind","keywords_array":[],"namespace":"org.fasterxml.jackson.core","versions_count":2,"first_release_published_at":"2025-12-19T07:26:40.000Z","latest_release_published_at":"2025-12-25T07:52:15.000Z","latest_release_number":"2.20.2","last_synced_at":"2026-05-25T01:03:52.852Z","created_at":"2025-12-25T08:16:40.257Z","updated_at":"2026-05-25T01:03:52.853Z","registry_url":"https://central.sonatype.com/artifact/org.fasterxml.jackson.core/jackson-databind/","install_command":null,"documentation_url":"https://appdoc.app/artifact/org.fasterxml.jackson.core/jackson-databind/","metadata":{"distribution_repositories":["https://s01.oss.sonatype.org/service/local/staging/deploy/maven2/","https://s01.oss.sonatype.org/content/repositories/snapshots"]},"repo_metadata":{},"repo_metadata_updated_at":"2025-12-26T04:03:31.144Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":30.73356155557955,"dependent_packages_count":43.93881879316169,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":37.336190174370614},"purl":"pkg:maven/org.fasterxml.jackson.core/jackson-databind","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/maven/org.fasterxml.jackson.core:jackson-databind","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/maven/org.fasterxml.jackson.core:jackson-databind","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/maven/org.fasterxml.jackson.core:jackson-databind/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":null,"versions_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.fasterxml.jackson.core:jackson-databind/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.fasterxml.jackson.core:jackson-databind/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.fasterxml.jackson.core:jackson-databind/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.fasterxml.jackson.core:jackson-databind/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.fasterxml.jackson.core:jackson-databind/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.fasterxml.jackson.core:jackson-databind/codemeta","maintainers":[],"registry":{"name":"repo1.maven.org","url":"https://repo.maven.apache.org/maven2","ecosystem":"maven","default":true,"packages_count":608482,"maintainers_count":0,"namespaces_count":80807,"keywords_count":34879,"github":"maven-central","metadata":{"funded_packages_count":37828},"icon_url":"https://github.com/maven-central.png","created_at":"2022-07-21T16:40:13.074Z","updated_at":"2026-06-10T05:05:55.821Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/namespaces"}},{"id":4762525,"name":"com.fasterxml.jackson.core:jackson-databind","ecosystem":"maven","description":"General data-binding functionality for Jackson: works on core streaming API","homepage":"https://github.com/FasterXML/jackson","licenses":"The Apache Software License, Version 2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/FasterXML/jackson-databind","keywords_array":[],"namespace":"com.fasterxml.jackson.core","versions_count":226,"first_release_published_at":"2012-02-19T08:05:22.000Z","latest_release_published_at":"2026-06-01T00:09:53.000Z","latest_release_number":"2.22.0","last_synced_at":"2026-06-19T16:12:30.823Z","created_at":"2022-07-26T04:07:55.792Z","updated_at":"2026-06-20T06:12:04.677Z","registry_url":"https://central.sonatype.com/artifact/com.fasterxml.jackson.core/jackson-databind/","install_command":null,"documentation_url":"https://appdoc.app/artifact/com.fasterxml.jackson.core/jackson-databind/","metadata":{"repositories":["https://central.sonatype.com/repository/maven-snapshots"]},"repo_metadata":{"id":2098093,"uuid":"3038937","full_name":"FasterXML/jackson-databind","owner":"FasterXML","description":"General data-binding package for Jackson (2.x): works on streaming API (core) implementation(s)","archived":false,"fork":false,"pushed_at":"2025-10-03T23:38:13.000Z","size":83664,"stargazers_count":3633,"open_issues_count":375,"forks_count":1439,"subscribers_count":167,"default_branch":"2.x","last_synced_at":"2025-10-08T15:10:21.667Z","etag":null,"topics":["hacktoberfest","jackson","jackson-databind","json"],"latest_commit_sha":null,"homepage":"","language":"Java","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/FasterXML.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":".github/FUNDING.yml","license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null},"funding":{"tidelift":"maven/com.fasterxml.jackson.core:jackson-databind","github":"cowtowncoder"}},"created_at":"2011-12-23T07:17:41.000Z","updated_at":"2025-10-08T01:00:58.000Z","dependencies_parsed_at":"2024-05-29T03:58:02.675Z","dependency_job_id":"3774e870-3005-4977-b5e0-cbc50c6a4d09","html_url":"https://github.com/FasterXML/jackson-databind","commit_stats":{"total_commits":6633,"total_committers":286,"mean_commits":"23.192307692307693","dds":0.148047640584954,"last_synced_commit":"bb5b3cc63a5a5594e3fe0d4fd105acffaa09b30a"},"previous_names":[],"tags_count":221,"template":false,"template_full_name":null,"purl":"pkg:github/FasterXML/jackson-databind","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/FasterXML","download_url":"https://codeload.github.com/FasterXML/jackson-databind/tar.gz/refs/heads/2.x","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/sbom","scorecard":{"id":49363,"data":{"date":"2025-08-11","repo":{"name":"github.com/FasterXML/jackson-databind","commit":"abe7a7803535b6adf387ee0e78d6a3c8660d416a"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":7.9,"checks":[{"name":"Code-Review","score":0,"reason":"Found 1/29 approved changesets -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Maintained","score":10,"reason":"30 commit(s) and 25 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Token-Permissions","score":10,"reason":"GitHub workflow tokens follow principle of least privilege","details":["Info: jobLevel 'actions' permission set to 'read': .github/workflows/codeql-analysis.yml:15","Info: jobLevel 'contents' permission set to 'read': .github/workflows/codeql-analysis.yml:16","Info: topLevel 'contents' permission set to 'read': .github/workflows/cifuzz.yml:8","Info: topLevel 'contents' permission set to 'read': .github/workflows/codeql-analysis.yml:8","Info: topLevel 'contents' permission set to 'read': .github/workflows/dep_build_v2.yml:9","Info: topLevel 'contents' permission set to 'read': .github/workflows/dep_build_v3.yml:9","Info: topLevel 'contents' permission set to 'read': .github/workflows/main.yml:13","Info: topLevel 'contents' permission set to 'read': .github/workflows/trigger_dep_builds_v2.yml:8","Info: topLevel 'contents' permission set to 'read': .github/workflows/trigger_dep_builds_v3.yml:8","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Pinned-Dependencies","score":7,"reason":"dependency not pinned by hash detected -- score normalized to 7","details":["Warn: third-party GitHubAction not pinned by hash: .github/workflows/cifuzz.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/FasterXML/jackson-databind/cifuzz.yml/2.x?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cifuzz.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/FasterXML/jackson-databind/cifuzz.yml/2.x?enable=pin","Info:  11 out of  11 GitHub-owned GitHubAction dependencies pinned","Info:   3 out of   5 third-party GitHubAction dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Fuzzing","score":10,"reason":"project is fuzzed","details":["Info: OSSFuzz integration found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":3,"reason":"branch protection is not maximal on development and all release branches","details":["Info: 'allow deletion' disabled on branch '2.x'","Info: 'force pushes' disabled on branch '2.x'","Warn: branch '2.x' does not require approvers","Warn: codeowners review is not required on branch '2.x'","Warn: no status checks found to merge onto branch '2.x'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Packaging","score":10,"reason":"packaging workflow detected","details":["Info: Project packages its releases by way of GitHub Actions.: .github/workflows/main.yml:16"],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"SAST","score":7,"reason":"SAST tool detected but not run on all commits","details":["Info: SAST configuration detected: CodeQL","Warn: 0 commits out of 5 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-08-14T23:24:41.015Z","repository_id":2098093,"created_at":"2025-08-14T23:24:41.015Z","updated_at":"2025-08-14T23:24:41.015Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":279000780,"owners_count":26082906,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-10-09T02:00:07.460Z","response_time":59,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"FasterXML","name":"FasterXML, LLC","uuid":"382692","kind":"organization","description":null,"email":"info@fasterxml.com","website":"http://fasterxml.com","location":"Seattle, WA","twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/382692?v=4","repositories_count":68,"last_synced_at":"2023-04-14T17:44:54.358Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/FasterXML","funding_links":[],"total_stars":null,"followers":null,"following":null,"created_at":"2022-11-02T18:09:50.546Z","updated_at":"2023-04-14T17:44:54.918Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/FasterXML","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/FasterXML/repositories"},"tags":[{"name":"jackson-databind-3.0.0-rc10","sha":"319c5cc8923e1734bf69c42a90ac143253c92a0d","kind":"tag","published_at":"2025-09-20T00:10:02.000Z","download_url":"https://codeload.github.com/FasterXML/jackson-databind/tar.gz/jackson-databind-3.0.0-rc10","html_url":"https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-3.0.0-rc10","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/FasterXML/jackson-databind@jackson-databind-3.0.0-rc10","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-3.0.0-rc10","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-3.0.0-rc10/manifests"},{"name":"jackson-databind-3.0.0-rc9","sha":"3106515e017f10bfa320568c65f79fa5773e958c","kind":"tag","published_at":"2025-09-06T01:16:07.000Z","download_url":"https://codeload.github.com/FasterXML/jackson-databind/tar.gz/jackson-databind-3.0.0-rc9","html_url":"https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-3.0.0-rc9","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/FasterXML/jackson-databind@jackson-databind-3.0.0-rc9","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-3.0.0-rc9","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-3.0.0-rc9/manifests"},{"name":"jackson-databind-2.20.0","sha":"4260f88180e5e45f3be1a290114e55c042bb2213","kind":"tag","published_at":"2025-08-28T23:00:10.000Z","download_url":"https://codeload.github.com/FasterXML/jackson-databind/tar.gz/jackson-databind-2.20.0","html_url":"https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.20.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/FasterXML/jackson-databind@jackson-databind-2.20.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.20.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.20.0/manifests"},{"name":"jackson-databind-3.0.0-rc8","sha":"5eec1d8d3de70435bd8d58eb6cd528c507491183","kind":"tag","published_at":"2025-08-13T18:15:27.000Z","download_url":"https://codeload.github.com/FasterXML/jackson-databind/tar.gz/jackson-databind-3.0.0-rc8","html_url":"https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-3.0.0-rc8","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/FasterXML/jackson-databind@jackson-databind-3.0.0-rc8","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-3.0.0-rc8","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-3.0.0-rc8/manifests"},{"name":"jackson-databind-3.0.0-rc7","sha":"dd140cf9ecb2306085a6da576186cc0b9b4e2802","kind":"tag","published_at":"2025-08-08T15:49:22.000Z","download_url":"https://codeload.github.com/FasterXML/jackson-databind/tar.gz/jackson-databind-3.0.0-rc7","html_url":"https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-3.0.0-rc7","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/FasterXML/jackson-databind@jackson-databind-3.0.0-rc7","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-3.0.0-rc7","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-3.0.0-rc7/manifests"},{"name":"jackson-databind-2.20.0-rc1","sha":"de697b027c19a44b4f62e4fe0e5b004554a640cc","kind":"tag","published_at":"2025-08-05T01:01:08.000Z","download_url":"https://codeload.github.com/FasterXML/jackson-databind/tar.gz/jackson-databind-2.20.0-rc1","html_url":"https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.20.0-rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/FasterXML/jackson-databind@jackson-databind-2.20.0-rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.20.0-rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.20.0-rc1/manifests"},{"name":"jackson-databind-3.0.0-rc6","sha":"b9b7ba09aba51ee46d292225c6e57adb10681e40","kind":"tag","published_at":"2025-07-19T01:05:30.000Z","download_url":"https://codeload.github.com/FasterXML/jackson-databind/tar.gz/jackson-databind-3.0.0-rc6","html_url":"https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-3.0.0-rc6","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/FasterXML/jackson-databind@jackson-databind-3.0.0-rc6","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-3.0.0-rc6","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-3.0.0-rc6/manifests"},{"name":"jackson-databind-2.19.2","sha":"1a506043e0644c9cf60c0905474459605fc751d0","kind":"tag","published_at":"2025-07-18T17:49:23.000Z","download_url":"https://codeload.github.com/FasterXML/jackson-databind/tar.gz/jackson-databind-2.19.2","html_url":"https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.19.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/FasterXML/jackson-databind@jackson-databind-2.19.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.19.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.19.2/manifests"},{"name":"jackson-databind-2.19.1","sha":"cb317b071a86038b81f15c094686afaa87810d9d","kind":"tag","published_at":"2025-06-14T01:13:22.000Z","download_url":"https://codeload.github.com/FasterXML/jackson-databind/tar.gz/jackson-databind-2.19.1","html_url":"https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.19.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/FasterXML/jackson-databind@jackson-databind-2.19.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.19.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.19.1/manifests"},{"name":"jackson-databind-3.0.0-rc5","sha":"c4b46d2d886a9dae932a3bd7ea3dfbd4b8240c09","kind":"tag","published_at":"2025-05-22T16:47:08.000Z","download_url":"https://codeload.github.com/FasterXML/jackson-databind/tar.gz/jackson-databind-3.0.0-rc5","html_url":"https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-3.0.0-rc5","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/FasterXML/jackson-databind@jackson-databind-3.0.0-rc5","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-3.0.0-rc5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-3.0.0-rc5/manifests"},{"name":"jackson-databind-3.0.0-rc4","sha":"c4800449cc75905fb92e952066458cb2509508bd","kind":"tag","published_at":"2025-05-10T23:26:20.000Z","download_url":"https://codeload.github.com/FasterXML/jackson-databind/tar.gz/jackson-databind-3.0.0-rc4","html_url":"https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-3.0.0-rc4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/FasterXML/jackson-databind@jackson-databind-3.0.0-rc4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-3.0.0-rc4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-3.0.0-rc4/manifests"},{"name":"jackson-databind-2.18.4","sha":"4b66d3fbc506de350213b0d9091baa3e216c16a9","kind":"tag","published_at":"2025-05-07T00:28:43.000Z","download_url":"https://codeload.github.com/FasterXML/jackson-databind/tar.gz/jackson-databind-2.18.4","html_url":"https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.18.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/FasterXML/jackson-databind@jackson-databind-2.18.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.18.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.18.4/manifests"},{"name":"jackson-databind-2.19.0","sha":"f644a920f4ac768797edf7709070411837c83ef8","kind":"tag","published_at":"2025-04-24T23:41:05.000Z","download_url":"https://codeload.github.com/FasterXML/jackson-databind/tar.gz/jackson-databind-2.19.0","html_url":"https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.19.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/FasterXML/jackson-databind@jackson-databind-2.19.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.19.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.19.0/manifests"},{"name":"jackson-databind-3.0.0-rc3","sha":"6371b60f82f1b428be5503715df33c41e942f6c3","kind":"tag","published_at":"2025-04-14T01:54:02.000Z","download_url":"https://codeload.github.com/FasterXML/jackson-databind/tar.gz/jackson-databind-3.0.0-rc3","html_url":"https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-3.0.0-rc3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/FasterXML/jackson-databind@jackson-databind-3.0.0-rc3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-3.0.0-rc3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-3.0.0-rc3/manifests"},{"name":"jackson-databind-2.19.0-rc2","sha":"b6ff25b21793e245dcecb43a76a573468fe01238","kind":"tag","published_at":"2025-04-08T01:22:57.000Z","download_url":"https://codeload.github.com/FasterXML/jackson-databind/tar.gz/jackson-databind-2.19.0-rc2","html_url":"https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.19.0-rc2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/FasterXML/jackson-databind@jackson-databind-2.19.0-rc2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.19.0-rc2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.19.0-rc2/manifests"},{"name":"jackson-databind-3.0.0-rc2","sha":"e084b510a1ab615e57645bfda9e8b5c759def266","kind":"tag","published_at":"2025-03-28T22:58:23.000Z","download_url":"https://codeload.github.com/FasterXML/jackson-databind/tar.gz/jackson-databind-3.0.0-rc2","html_url":"https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-3.0.0-rc2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/FasterXML/jackson-databind@jackson-databind-3.0.0-rc2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-3.0.0-rc2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-3.0.0-rc2/manifests"},{"name":"jackson-databind-3.0.0-rc1","sha":"1f1d46372b5869a403b610f4012a271e2603b3fa","kind":"tag","published_at":"2025-03-08T00:19:38.000Z","download_url":"https://codeload.github.com/FasterXML/jackson-databind/tar.gz/jackson-databind-3.0.0-rc1","html_url":"https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-3.0.0-rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/FasterXML/jackson-databind@jackson-databind-3.0.0-rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-3.0.0-rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-3.0.0-rc1/manifests"},{"name":"jackson-databind-2.18.3","sha":"4105844f3665612637f5cf9410df5b83d375e620","kind":"tag","published_at":"2025-02-28T23:37:38.000Z","download_url":"https://codeload.github.com/FasterXML/jackson-databind/tar.gz/jackson-databind-2.18.3","html_url":"https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.18.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/FasterXML/jackson-databind@jackson-databind-2.18.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.18.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.18.3/manifests"},{"name":"jackson-databind-2.18.2","sha":"287af92705039b2afaa5ce2680026a3f6c25a8e9","kind":"tag","published_at":"2024-11-28T01:11:22.000Z","download_url":"https://codeload.github.com/FasterXML/jackson-databind/tar.gz/jackson-databind-2.18.2","html_url":"https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.18.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/FasterXML/jackson-databind@jackson-databind-2.18.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.18.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.18.2/manifests"},{"name":"jackson-databind-2.17.3","sha":"642423256392d1d3c03c5dbe33289da19d0f7072","kind":"tag","published_at":"2024-11-01T20:32:09.000Z","download_url":"https://codeload.github.com/FasterXML/jackson-databind/tar.gz/jackson-databind-2.17.3","html_url":"https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.17.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/FasterXML/jackson-databind@jackson-databind-2.17.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.17.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.17.3/manifests"},{"name":"jackson-databind-2.18.1","sha":"0693a8c55576ac7aa414411b84550320288e0bb2","kind":"tag","published_at":"2024-10-28T23:22:36.000Z","download_url":"https://codeload.github.com/FasterXML/jackson-databind/tar.gz/jackson-databind-2.18.1","html_url":"https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.18.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/FasterXML/jackson-databind@jackson-databind-2.18.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.18.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.18.1/manifests"},{"name":"jackson-databind-2.18.0","sha":"6ecd5fc917ecc2f9b45bd476de70f01849239902","kind":"tag","published_at":"2024-09-27T01:57:11.000Z","download_url":"https://codeload.github.com/FasterXML/jackson-databind/tar.gz/jackson-databind-2.18.0","html_url":"https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.18.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/FasterXML/jackson-databind@jackson-databind-2.18.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.18.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.18.0/manifests"},{"name":"jackson-databind-2.18.0-rc1","sha":"98c46f726b5622d038ecc3725c07bd0bd99dd4fe","kind":"tag","published_at":"2024-08-30T18:18:55.000Z","download_url":"https://codeload.github.com/FasterXML/jackson-databind/tar.gz/jackson-databind-2.18.0-rc1","html_url":"https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.18.0-rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/FasterXML/jackson-databind@jackson-databind-2.18.0-rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.18.0-rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.18.0-rc1/manifests"},{"name":"jackson-databind-2.17.2","sha":"091d968751ef00150d22a788fe7f45b7cdcb337a","kind":"tag","published_at":"2024-07-05T17:15:04.000Z","download_url":"https://codeload.github.com/FasterXML/jackson-databind/tar.gz/jackson-databind-2.17.2","html_url":"https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.17.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/FasterXML/jackson-databind@jackson-databind-2.17.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.17.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.17.2/manifests"},{"name":"jackson-databind-2.17.1","sha":"cf9e8558de0fc67e69ad5a9610dbf077a8e287ff","kind":"tag","published_at":"2024-05-05T02:07:05.000Z","download_url":"https://codeload.github.com/FasterXML/jackson-databind/tar.gz/jackson-databind-2.17.1","html_url":"https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.17.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/FasterXML/jackson-databind@jackson-databind-2.17.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.17.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.17.1/manifests"},{"name":"jackson-databind-2.12.7.2","sha":"2e1b6f217aa8da629ff24509060b1108ec776198","kind":"tag","published_at":"2024-05-02T20:09:06.000Z","download_url":"https://codeload.github.com/FasterXML/jackson-databind/tar.gz/jackson-databind-2.12.7.2","html_url":"https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.12.7.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/FasterXML/jackson-databind@jackson-databind-2.12.7.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.12.7.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.12.7.2/manifests"},{"name":"jackson-databind-2.17.0","sha":"cd2d15eb466cda556bbce2f7256baad68a69e34a","kind":"tag","published_at":"2024-03-12T21:52:42.000Z","download_url":"https://codeload.github.com/FasterXML/jackson-databind/tar.gz/jackson-databind-2.17.0","html_url":"https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.17.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/FasterXML/jackson-databind@jackson-databind-2.17.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.17.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.17.0/manifests"},{"name":"jackson-databind-2.16.2","sha":"a04a0a1852acf9ab5a80d10631026d9814436114","kind":"tag","published_at":"2024-03-09T18:52:49.000Z","download_url":"https://codeload.github.com/FasterXML/jackson-databind/tar.gz/jackson-databind-2.16.2","html_url":"https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.16.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/FasterXML/jackson-databind@jackson-databind-2.16.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.16.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.16.2/manifests"},{"name":"jackson-databind-2.17.0-rc1","sha":"a672347fcf8cea9f19452facab3e625dc498ceb8","kind":"tag","published_at":"2024-02-27T01:47:49.000Z","download_url":"https://codeload.github.com/FasterXML/jackson-databind/tar.gz/jackson-databind-2.17.0-rc1","html_url":"https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.17.0-rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/FasterXML/jackson-databind@jackson-databind-2.17.0-rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.17.0-rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.17.0-rc1/manifests"},{"name":"jackson-databind-2.15.4","sha":"3bf83c17335bca1ae61fbd0a7aa144056cd4b754","kind":"tag","published_at":"2024-02-15T17:34:45.000Z","download_url":"https://codeload.github.com/FasterXML/jackson-databind/tar.gz/jackson-databind-2.15.4","html_url":"https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.15.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/FasterXML/jackson-databind@jackson-databind-2.15.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.15.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.15.4/manifests"},{"name":"jackson-databind-2.16.1","sha":"28efa9ba66baf53fd33ba0c0971dbffd7221502c","kind":"tag","published_at":"2023-12-24T04:29:34.000Z","download_url":"https://codeload.github.com/FasterXML/jackson-databind/tar.gz/jackson-databind-2.16.1","html_url":"https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.16.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/FasterXML/jackson-databind@jackson-databind-2.16.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.16.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.16.1/manifests"},{"name":"jackson-databind-2.16.0","sha":"74621b01e69396160cc48b023aa0e85f38964c0f","kind":"tag","published_at":"2023-11-15T22:38:21.000Z","download_url":"https://codeload.github.com/FasterXML/jackson-databind/tar.gz/jackson-databind-2.16.0","html_url":"https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.16.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/FasterXML/jackson-databind@jackson-databind-2.16.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.16.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.16.0/manifests"},{"name":"jackson-databind-2.16.0-rc1","sha":"03466d83b0e9f58d395fae79b470024885eb1ef5","kind":"tag","published_at":"2023-10-20T22:43:13.000Z","download_url":"https://codeload.github.com/FasterXML/jackson-databind/tar.gz/jackson-databind-2.16.0-rc1","html_url":"https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.16.0-rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/FasterXML/jackson-databind@jackson-databind-2.16.0-rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.16.0-rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.16.0-rc1/manifests"},{"name":"jackson-databind-2.15.3","sha":"31dc75f082e225863d4e2f033f5df9a9daf062a9","kind":"tag","published_at":"2023-10-13T00:19:42.000Z","download_url":"https://codeload.github.com/FasterXML/jackson-databind/tar.gz/jackson-databind-2.15.3","html_url":"https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.15.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/FasterXML/jackson-databind@jackson-databind-2.15.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.15.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.15.3/manifests"},{"name":"jackson-databind-2.15.2","sha":"74a57b2f6cd3b6e0fe2a61ed16734f15ba2abc95","kind":"tag","published_at":"2023-05-30T23:26:56.000Z","download_url":"https://codeload.github.com/FasterXML/jackson-databind/tar.gz/jackson-databind-2.15.2","html_url":"https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.15.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/FasterXML/jackson-databind@jackson-databind-2.15.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.15.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.15.2/manifests"},{"name":"jackson-databind-2.15.1","sha":"6e3732557c3fcd45687a9e2780165f5adaa2c41f","kind":"tag","published_at":"2023-05-16T21:47:36.000Z","download_url":"https://codeload.github.com/FasterXML/jackson-databind/tar.gz/jackson-databind-2.15.1","html_url":"https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.15.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/FasterXML/jackson-databind@jackson-databind-2.15.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.15.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.15.1/manifests"},{"name":"jackson-databind-2.14.3","sha":"8cdba2177a411c9dfc8949bbf0f23b4fa8ef5d8d","kind":"tag","published_at":"2023-05-05T16:31:42.000Z","download_url":"https://codeload.github.com/FasterXML/jackson-databind/tar.gz/jackson-databind-2.14.3","html_url":"https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.14.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/FasterXML/jackson-databind@jackson-databind-2.14.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.14.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.14.3/manifests"},{"name":"jackson-databind-2.15.0","sha":"30e5c71f2269e21988ba729371d989b55683a5f1","kind":"tag","published_at":"2023-04-23T21:43:14.000Z","download_url":"https://codeload.github.com/FasterXML/jackson-databind/tar.gz/jackson-databind-2.15.0","html_url":"https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.15.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/FasterXML/jackson-databind@jackson-databind-2.15.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.15.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.15.0/manifests"},{"name":"jackson-databind-2.15.0-rc3","sha":"cc72e9d9142d148a3b356bf06623bf8be59543ff","kind":"tag","published_at":"2023-04-14T20:14:10.000Z","download_url":"https://codeload.github.com/FasterXML/jackson-databind/tar.gz/jackson-databind-2.15.0-rc3","html_url":"https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.15.0-rc3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/FasterXML/jackson-databind@jackson-databind-2.15.0-rc3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.15.0-rc3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.15.0-rc3/manifests"},{"name":"jackson-databind-2.15.0-rc2","sha":"f0e45fbc5fbae98c74f9ed6558e8571ad51aadd6","kind":"tag","published_at":"2023-03-28T22:57:11.000Z","download_url":"https://codeload.github.com/FasterXML/jackson-databind/tar.gz/jackson-databind-2.15.0-rc2","html_url":"https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.15.0-rc2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/FasterXML/jackson-databind@jackson-databind-2.15.0-rc2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.15.0-rc2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.15.0-rc2/manifests"},{"name":"jackson-databind-2.15.0-rc1","sha":"418dfff97550228e3fb7f10cf2d4bc2bd68212b1","kind":"tag","published_at":"2023-03-18T20:36:55.000Z","download_url":"https://codeload.github.com/FasterXML/jackson-databind/tar.gz/jackson-databind-2.15.0-rc1","html_url":"https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.15.0-rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/FasterXML/jackson-databind@jackson-databind-2.15.0-rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.15.0-rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.15.0-rc1/manifests"},{"name":"jackson-databind-2.14.2","sha":"52c74def0e487e1149bdc63783b1086ddcb095b7","kind":"tag","published_at":"2023-01-29T01:31:02.000Z","download_url":"https://codeload.github.com/FasterXML/jackson-databind/tar.gz/jackson-databind-2.14.2","html_url":"https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.14.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/FasterXML/jackson-databind@jackson-databind-2.14.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.14.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.14.2/manifests"},{"name":"jackson-databind-2.13.5","sha":"23c77497c4515b6ab523138f14a1448e5a1e2fe3","kind":"tag","published_at":"2023-01-23T00:47:31.000Z","download_url":"https://codeload.github.com/FasterXML/jackson-databind/tar.gz/jackson-databind-2.13.5","html_url":"https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.13.5","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/FasterXML/jackson-databind@jackson-databind-2.13.5","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.13.5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.13.5/manifests"},{"name":"jackson-databind-2.14.1","sha":"fccf8c1ecdaf8d1f3e94d72c152643a05fea0446","kind":"tag","published_at":"2022-11-21T23:42:23.000Z","download_url":"https://codeload.github.com/FasterXML/jackson-databind/tar.gz/jackson-databind-2.14.1","html_url":"https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.14.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/FasterXML/jackson-databind@jackson-databind-2.14.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.14.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.14.1/manifests"},{"name":"jackson-databind-2.14.0","sha":"f7bff132b41a8b7303b604e04d4c89ecea402895","kind":"tag","published_at":"2022-11-05T20:38:46.000Z","download_url":"https://codeload.github.com/FasterXML/jackson-databind/tar.gz/jackson-databind-2.14.0","html_url":"https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.14.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/FasterXML/jackson-databind@jackson-databind-2.14.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.14.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.14.0/manifests"},{"name":"jackson-databind-2.14.0-rc3","sha":"b9e56d40cc945ddc9e1425b3200a60c2c7b0eded","kind":"tag","published_at":"2022-10-28T21:55:40.000Z","download_url":"https://codeload.github.com/FasterXML/jackson-databind/tar.gz/jackson-databind-2.14.0-rc3","html_url":"https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.14.0-rc3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/FasterXML/jackson-databind@jackson-databind-2.14.0-rc3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.14.0-rc3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.14.0-rc3/manifests"},{"name":"jackson-databind-2.13.4.2","sha":"ee316a03eb073fa7bbaf0933627fc24e05299f9e","kind":"tag","published_at":"2022-10-13T17:32:59.000Z","download_url":"https://codeload.github.com/FasterXML/jackson-databind/tar.gz/jackson-databind-2.13.4.2","html_url":"https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.13.4.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/FasterXML/jackson-databind@jackson-databind-2.13.4.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.13.4.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.13.4.2/manifests"},{"name":"jackson-databind-2.12.7.1","sha":"ea6f3d4b05dde564a1a5013dd34467d676072afa","kind":"tag","published_at":"2022-10-13T03:36:00.000Z","download_url":"https://codeload.github.com/FasterXML/jackson-databind/tar.gz/jackson-databind-2.12.7.1","html_url":"https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.12.7.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/FasterXML/jackson-databind@jackson-databind-2.12.7.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.12.7.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.12.7.1/manifests"},{"name":"jackson-databind-2.13.4.1","sha":"19e6b6fbcfd4105dc6365928ebc2f07da61e78c5","kind":"tag","published_at":"2022-10-12T20:01:11.000Z","download_url":"https://codeload.github.com/FasterXML/jackson-databind/tar.gz/jackson-databind-2.13.4.1","html_url":"https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.13.4.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/FasterXML/jackson-databind@jackson-databind-2.13.4.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.13.4.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.13.4.1/manifests"},{"name":"jackson-databind-2.14.0-rc2","sha":"a471696fc6a13336763c29e5d79d71288b225f83","kind":"tag","published_at":"2022-10-10T23:45:17.000Z","download_url":"https://codeload.github.com/FasterXML/jackson-databind/tar.gz/jackson-databind-2.14.0-rc2","html_url":"https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.14.0-rc2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/FasterXML/jackson-databind@jackson-databind-2.14.0-rc2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.14.0-rc2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.14.0-rc2/manifests"},{"name":"jackson-databind-2.14.0-rc1","sha":"6e7ff14e2d850bfed2ebf8ebd6b3d71ce668cadd","kind":"tag","published_at":"2022-09-25T23:03:24.000Z","download_url":"https://codeload.github.com/FasterXML/jackson-databind/tar.gz/jackson-databind-2.14.0-rc1","html_url":"https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.14.0-rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/FasterXML/jackson-databind@jackson-databind-2.14.0-rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.14.0-rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.14.0-rc1/manifests"},{"name":"jackson-databind-2.13.4","sha":"13cd41d616022f63a0af38db2389de52199cf62c","kind":"tag","published_at":"2022-09-03T22:17:41.000Z","download_url":"https://codeload.github.com/FasterXML/jackson-databind/tar.gz/jackson-databind-2.13.4","html_url":"https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.13.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/FasterXML/jackson-databind@jackson-databind-2.13.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.13.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.13.4/manifests"},{"name":"jackson-databind-2.12.7","sha":"5a320ece5d058164bcd495665200c2a5e2ceeaff","kind":"tag","published_at":"2022-05-26T17:44:58.000Z","download_url":"https://codeload.github.com/FasterXML/jackson-databind/tar.gz/jackson-databind-2.12.7","html_url":"https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.12.7","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/FasterXML/jackson-databind@jackson-databind-2.12.7","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.12.7","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.12.7/manifests"},{"name":"jackson-databind-2.13.3","sha":"bfe08f8178f028a71bc25bf68a8f690d0e484d9e","kind":"tag","published_at":"2022-05-14T14:55:56.000Z","download_url":"https://codeload.github.com/FasterXML/jackson-databind/tar.gz/jackson-databind-2.13.3","html_url":"https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.13.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/FasterXML/jackson-databind@jackson-databind-2.13.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.13.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.13.3/manifests"},{"name":"jackson-databind-2.13.2.2","sha":"7aebc170b1281f053102339997744f35718f1048","kind":"tag","published_at":"2022-03-29T01:59:44.000Z","download_url":"https://codeload.github.com/FasterXML/jackson-databind/tar.gz/jackson-databind-2.13.2.2","html_url":"https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.13.2.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/FasterXML/jackson-databind@jackson-databind-2.13.2.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.13.2.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.13.2.2/manifests"},{"name":"jackson-databind-2.12.6.1","sha":"f758e50f0ecb7c24d91f66beda42d259a1e2c4a4","kind":"tag","published_at":"2022-03-27T02:29:44.000Z","download_url":"https://codeload.github.com/FasterXML/jackson-databind/tar.gz/jackson-databind-2.12.6.1","html_url":"https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.12.6.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/FasterXML/jackson-databind@jackson-databind-2.12.6.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.12.6.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.12.6.1/manifests"},{"name":"jackson-databind-2.13.2.1","sha":"bdf6441dac25e2908b642100a588656da57b4077","kind":"tag","published_at":"2022-03-25T02:38:10.000Z","download_url":"https://codeload.github.com/FasterXML/jackson-databind/tar.gz/jackson-databind-2.13.2.1","html_url":"https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.13.2.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/FasterXML/jackson-databind@jackson-databind-2.13.2.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.13.2.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.13.2.1/manifests"},{"name":"jackson-databind-2.13.2","sha":"87014ed5f3dfc1dcc21b704c2ce117266780c166","kind":"tag","published_at":"2022-03-06T19:40:29.000Z","download_url":"https://codeload.github.com/FasterXML/jackson-databind/tar.gz/jackson-databind-2.13.2","html_url":"https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.13.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/FasterXML/jackson-databind@jackson-databind-2.13.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.13.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.13.2/manifests"},{"name":"jackson-databind-2.13.1","sha":"271d1b189b0e7710d5c69915518a24b06c1008bc","kind":"tag","published_at":"2021-12-19T00:51:48.000Z","download_url":"https://codeload.github.com/FasterXML/jackson-databind/tar.gz/jackson-databind-2.13.1","html_url":"https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.13.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/FasterXML/jackson-databind@jackson-databind-2.13.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.13.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.13.1/manifests"},{"name":"jackson-databind-2.12.6","sha":"917d1a9c3b57b2a38b2e94a9982c70465730021b","kind":"tag","published_at":"2021-12-15T02:32:39.000Z","download_url":"https://codeload.github.com/FasterXML/jackson-databind/tar.gz/jackson-databind-2.12.6","html_url":"https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.12.6","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/FasterXML/jackson-databind@jackson-databind-2.12.6","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.12.6","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.12.6/manifests"},{"name":"jackson-databind-2.13.0","sha":"70c5dfbd52410d99d36181072711125ac5240a15","kind":"tag","published_at":"2021-09-30T20:53:32.000Z","download_url":"https://codeload.github.com/FasterXML/jackson-databind/tar.gz/jackson-databind-2.13.0","html_url":"https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.13.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/FasterXML/jackson-databind@jackson-databind-2.13.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.13.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.13.0/manifests"},{"name":"jackson-databind-2.13.0-rc2","sha":"e13f7db670a13474d65511b1b06e4111c01da796","kind":"tag","published_at":"2021-08-27T03:45:16.000Z","download_url":"https://codeload.github.com/FasterXML/jackson-databind/tar.gz/jackson-databind-2.13.0-rc2","html_url":"https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.13.0-rc2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/FasterXML/jackson-databind@jackson-databind-2.13.0-rc2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.13.0-rc2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.13.0-rc2/manifests"},{"name":"jackson-databind-2.12.5","sha":"51519de0299d6e3556009318932959c85333dead","kind":"tag","published_at":"2021-08-27T00:33:43.000Z","download_url":"https://codeload.github.com/FasterXML/jackson-databind/tar.gz/jackson-databind-2.12.5","html_url":"https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.12.5","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/FasterXML/jackson-databind@jackson-databind-2.12.5","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.12.5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.12.5/manifests"},{"name":"jackson-databind-2.13.0-rc1","sha":"0f757c29426b3e39a569e45855539f0ae31eb5c4","kind":"tag","published_at":"2021-07-14T01:03:32.000Z","download_url":"https://codeload.github.com/FasterXML/jackson-databind/tar.gz/jackson-databind-2.13.0-rc1","html_url":"https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.13.0-rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/FasterXML/jackson-databind@jackson-databind-2.13.0-rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.13.0-rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.13.0-rc1/manifests"},{"name":"jackson-databind-2.12.4","sha":"56329721111e28b28cfa6c7ba24aa7f1d84b56e5","kind":"tag","published_at":"2021-07-06T20:01:35.000Z","download_url":"https://codeload.github.com/FasterXML/jackson-databind/tar.gz/jackson-databind-2.12.4","html_url":"https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.12.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/FasterXML/jackson-databind@jackson-databind-2.12.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.12.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.12.4/manifests"},{"name":"jackson-databind-2.6.7.5","sha":"e19c557b789113f900018208d87446c34ae4fab3","kind":"tag","published_at":"2021-06-22T03:53:28.000Z","download_url":"https://codeload.github.com/FasterXML/jackson-databind/tar.gz/jackson-databind-2.6.7.5","html_url":"https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.6.7.5","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/FasterXML/jackson-databind@jackson-databind-2.6.7.5","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.6.7.5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.6.7.5/manifests"},{"name":"jackson-databind-2.12.3","sha":"09a67155ea8380c35137aceb9ec6b261da8910d3","kind":"tag","published_at":"2021-04-12T17:48:47.000Z","download_url":"https://codeload.github.com/FasterXML/jackson-databind/tar.gz/jackson-databind-2.12.3","html_url":"https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.12.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/FasterXML/jackson-databind@jackson-databind-2.12.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.12.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.12.3/manifests"},{"name":"jackson-databind-2.12.2","sha":"16509f5f8a72ed07b857067dc88362f257bf52f8","kind":"tag","published_at":"2021-03-03T21:20:40.000Z","download_url":"https://codeload.github.com/FasterXML/jackson-databind/tar.gz/jackson-databind-2.12.2","html_url":"https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.12.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/FasterXML/jackson-databind@jackson-databind-2.12.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.12.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.12.2/manifests"},{"name":"jackson-databind-2.12.1","sha":"3dabdfaaeb633625d5031df70041adb7c576b812","kind":"tag","published_at":"2021-01-09T01:30:01.000Z","download_url":"https://codeload.github.com/FasterXML/jackson-databind/tar.gz/jackson-databind-2.12.1","html_url":"https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.12.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/FasterXML/jackson-databind@jackson-databind-2.12.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.12.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.12.1/manifests"},{"name":"jackson-databind-2.9.10.8","sha":"7ae9214c0670eeb679dd131ab0aee3565cc7af87","kind":"tag","published_at":"2021-01-06T02:20:31.000Z","download_url":"https://codeload.github.com/FasterXML/jackson-databind/tar.gz/jackson-databind-2.9.10.8","html_url":"https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.9.10.8","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/FasterXML/jackson-databind@jackson-databind-2.9.10.8","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.9.10.8","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.9.10.8/manifests"},{"name":"jackson-databind-2.11.4","sha":"65d3c168a324d81f5bb8ee333da689b0f71d8baa","kind":"tag","published_at":"2020-12-12T00:35:55.000Z","download_url":"https://codeload.github.com/FasterXML/jackson-databind/tar.gz/jackson-databind-2.11.4","html_url":"https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.11.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/FasterXML/jackson-databind@jackson-databind-2.11.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.11.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.11.4/manifests"},{"name":"jackson-databind-2.10.5.1","sha":"94484ca0177dd02c3ed83a5a5bbbcffc07a44d03","kind":"tag","published_at":"2020-12-02T03:44:27.000Z","download_url":"https://codeload.github.com/FasterXML/jackson-databind/tar.gz/jackson-databind-2.10.5.1","html_url":"https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.10.5.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/FasterXML/jackson-databind@jackson-databind-2.10.5.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.10.5.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.10.5.1/manifests"},{"name":"jackson-databind-2.9.10.7","sha":"d0e9952ea70d1af5c512322a32456f237afb9e9b","kind":"tag","published_at":"2020-12-02T02:17:15.000Z","download_url":"https://codeload.github.com/FasterXML/jackson-databind/tar.gz/jackson-databind-2.9.10.7","html_url":"https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.9.10.7","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/FasterXML/jackson-databind@jackson-databind-2.9.10.7","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.9.10.7","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.9.10.7/manifests"},{"name":"jackson-databind-2.12.0","sha":"37ca3bfb6c4fc3cfa3a64a58de85f24b8fcd8423","kind":"tag","published_at":"2020-11-29T01:16:01.000Z","download_url":"https://codeload.github.com/FasterXML/jackson-databind/tar.gz/jackson-databind-2.12.0","html_url":"https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.12.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/FasterXML/jackson-databind@jackson-databind-2.12.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.12.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.12.0/manifests"},{"name":"jackson-databind-2.12.0-rc2","sha":"82fa0e2bda08e45a76c8378d7afcb283cc42cdbf","kind":"tag","published_at":"2020-11-15T03:25:51.000Z","download_url":"https://codeload.github.com/FasterXML/jackson-databind/tar.gz/jackson-databind-2.12.0-rc2","html_url":"https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.12.0-rc2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/FasterXML/jackson-databind@jackson-databind-2.12.0-rc2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.12.0-rc2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.12.0-rc2/manifests"},{"name":"jackson-databind-2.6.7.4","sha":"fe5805bb27111c6fd010b04e7dc92a7536869301","kind":"tag","published_at":"2020-10-25T02:47:56.000Z","download_url":"https://codeload.github.com/FasterXML/jackson-databind/tar.gz/jackson-databind-2.6.7.4","html_url":"https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.6.7.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/FasterXML/jackson-databind@jackson-databind-2.6.7.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.6.7.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.6.7.4/manifests"},{"name":"jackson-databind-2.12.0-rc1","sha":"4700273660d38f7d3c13975a7f2af4344ec7c288","kind":"tag","published_at":"2020-10-12T00:34:42.000Z","download_url":"https://codeload.github.com/FasterXML/jackson-databind/tar.gz/jackson-databind-2.12.0-rc1","html_url":"https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.12.0-rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/FasterXML/jackson-databind@jackson-databind-2.12.0-rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.12.0-rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.12.0-rc1/manifests"},{"name":"jackson-databind-2.11.3","sha":"5a8ff8be80e07683ed3bf848a896dd742e662034","kind":"tag","published_at":"2020-10-01T22:38:23.000Z","download_url":"https://codeload.github.com/FasterXML/jackson-databind/tar.gz/jackson-databind-2.11.3","html_url":"https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.11.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/FasterXML/jackson-databind@jackson-databind-2.11.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.11.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.11.3/manifests"},{"name":"jackson-databind-2.9.10.6","sha":"f797abcbf63fa4b5faf20a2f567c29d1e513b450","kind":"tag","published_at":"2020-08-24T22:20:57.000Z","download_url":"https://codeload.github.com/FasterXML/jackson-databind/tar.gz/jackson-databind-2.9.10.6","html_url":"https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.9.10.6","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/FasterXML/jackson-databind@jackson-databind-2.9.10.6","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.9.10.6","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.9.10.6/manifests"},{"name":"jackson-databind-2.11.2","sha":"49e1c0e457beeead0525eda4e8214be5bb880287","kind":"tag","published_at":"2020-08-02T18:35:47.000Z","download_url":"https://codeload.github.com/FasterXML/jackson-databind/tar.gz/jackson-databind-2.11.2","html_url":"https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.11.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/FasterXML/jackson-databind@jackson-databind-2.11.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.11.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.11.2/manifests"},{"name":"jackson-databind-2.10.5","sha":"eea3ed056d221f72261ac161285ffcb4b0da36fc","kind":"tag","published_at":"2020-07-21T01:51:47.000Z","download_url":"https://codeload.github.com/FasterXML/jackson-databind/tar.gz/jackson-databind-2.10.5","html_url":"https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.10.5","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/FasterXML/jackson-databind@jackson-databind-2.10.5","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.10.5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.10.5/manifests"},{"name":"jackson-databind-2.11.1","sha":"56b44218892b056c4f27746a35a526dc3856f2d7","kind":"tag","published_at":"2020-06-25T02:44:26.000Z","download_url":"https://codeload.github.com/FasterXML/jackson-databind/tar.gz/jackson-databind-2.11.1","html_url":"https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.11.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/FasterXML/jackson-databind@jackson-databind-2.11.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.11.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.11.1/manifests"},{"name":"jackson-databind-2.9.10.5","sha":"82c84c74e99ab04cd46b5349f24be1c753034ce1","kind":"tag","published_at":"2020-06-22T01:37:36.000Z","download_url":"https://codeload.github.com/FasterXML/jackson-databind/tar.gz/jackson-databind-2.9.10.5","html_url":"https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.9.10.5","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/FasterXML/jackson-databind@jackson-databind-2.9.10.5","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.9.10.5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.9.10.5/manifests"},{"name":"jackson-databind-2.10.4","sha":"da102f3335c0b59e231b48422aa37721fac68a56","kind":"tag","published_at":"2020-05-02T22:36:24.000Z","download_url":"https://codeload.github.com/FasterXML/jackson-databind/tar.gz/jackson-databind-2.10.4","html_url":"https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.10.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/FasterXML/jackson-databind@jackson-databind-2.10.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.10.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.10.4/manifests"},{"name":"jackson-databind-2.11.0","sha":"276687428a5fd9c1f00f0f3231daff2f8c2bcfa3","kind":"tag","published_at":"2020-04-26T00:15:07.000Z","download_url":"https://codeload.github.com/FasterXML/jackson-databind/tar.gz/jackson-databind-2.11.0","html_url":"https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.11.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/FasterXML/jackson-databind@jackson-databind-2.11.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.11.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.11.0/manifests"},{"name":"jackson-databind-2.9.10.4","sha":"1d919062ec351a925a628be2986224383c27f561","kind":"tag","published_at":"2020-04-11T19:20:37.000Z","download_url":"https://codeload.github.com/FasterXML/jackson-databind/tar.gz/jackson-databind-2.9.10.4","html_url":"https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.9.10.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/FasterXML/jackson-databind@jackson-databind-2.9.10.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.9.10.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.9.10.4/manifests"},{"name":"jackson-databind-2.11.0.rc1","sha":"11cc49bc407ac7c567adb4568bfcd4aa4b696af3","kind":"tag","published_at":"2020-03-24T18:44:53.000Z","download_url":"https://codeload.github.com/FasterXML/jackson-databind/tar.gz/jackson-databind-2.11.0.rc1","html_url":"https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.11.0.rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/FasterXML/jackson-databind@jackson-databind-2.11.0.rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.11.0.rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.11.0.rc1/manifests"},{"name":"jackson-databind-2.8.11.6","sha":"1d5273df752a3912dfb8afe97a16a1a1db634839","kind":"tag","published_at":"2020-03-10T17:59:10.000Z","download_url":"https://codeload.github.com/FasterXML/jackson-databind/tar.gz/jackson-databind-2.8.11.6","html_url":"https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.8.11.6","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/FasterXML/jackson-databind@jackson-databind-2.8.11.6","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.8.11.6","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.8.11.6/manifests"},{"name":"jackson-databind-2.7.9.7","sha":"e8697cdbf415028b171f9b7698f3308eda00a3c7","kind":"tag","published_at":"2020-03-10T17:42:35.000Z","download_url":"https://codeload.github.com/FasterXML/jackson-databind/tar.gz/jackson-databind-2.7.9.7","html_url":"https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.7.9.7","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/FasterXML/jackson-databind@jackson-databind-2.7.9.7","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.7.9.7","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.7.9.7/manifests"},{"name":"jackson-databind-2.10.3","sha":"fa67a16d7a34e51e80c217f29b6bbd765c3ce689","kind":"tag","published_at":"2020-03-03T03:15:01.000Z","download_url":"https://codeload.github.com/FasterXML/jackson-databind/tar.gz/jackson-databind-2.10.3","html_url":"https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.10.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/FasterXML/jackson-databind@jackson-databind-2.10.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.10.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.10.3/manifests"},{"name":"jackson-databind-2.9.10.3","sha":"2d53865142a689cca7eb187776a71ad7f71c6660","kind":"tag","published_at":"2020-02-23T03:05:20.000Z","download_url":"https://codeload.github.com/FasterXML/jackson-databind/tar.gz/jackson-databind-2.9.10.3","html_url":"https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.9.10.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/FasterXML/jackson-databind@jackson-databind-2.9.10.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.9.10.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.9.10.3/manifests"},{"name":"jackson-databind-2.8.11.5","sha":"ba9ac61920a4391568f4959e399a25833eae9cf6","kind":"tag","published_at":"2020-02-09T23:39:22.000Z","download_url":"https://codeload.github.com/FasterXML/jackson-databind/tar.gz/jackson-databind-2.8.11.5","html_url":"https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.8.11.5","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/FasterXML/jackson-databind@jackson-databind-2.8.11.5","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.8.11.5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.8.11.5/manifests"},{"name":"jackson-databind-2.10.2","sha":"f2bf1fe15f6ca37bd16b9cf7e2cf7caa614149a2","kind":"tag","published_at":"2020-01-05T02:13:25.000Z","download_url":"https://codeload.github.com/FasterXML/jackson-databind/tar.gz/jackson-databind-2.10.2","html_url":"https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.10.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/FasterXML/jackson-databind@jackson-databind-2.10.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.10.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.10.2/manifests"},{"name":"jackson-databind-2.9.10.2","sha":"f78b6ec284cea3f3f57e8ea21a969b3735679905","kind":"tag","published_at":"2020-01-03T01:07:34.000Z","download_url":"https://codeload.github.com/FasterXML/jackson-databind/tar.gz/jackson-databind-2.9.10.2","html_url":"https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.9.10.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/FasterXML/jackson-databind@jackson-databind-2.9.10.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.9.10.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.9.10.2/manifests"},{"name":"jackson-databind-2.10.1","sha":"646b1e7b1a2b21213668ddd0c593d620e5fe69c4","kind":"tag","published_at":"2019-11-09T23:11:34.000Z","download_url":"https://codeload.github.com/FasterXML/jackson-databind/tar.gz/jackson-databind-2.10.1","html_url":"https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.10.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/FasterXML/jackson-databind@jackson-databind-2.10.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.10.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.10.1/manifests"},{"name":"jackson-databind-2.9.10.1","sha":"db82f32714c083da3c31267352f0dcc65fd371f5","kind":"tag","published_at":"2019-10-19T23:22:47.000Z","download_url":"https://codeload.github.com/FasterXML/jackson-databind/tar.gz/jackson-databind-2.9.10.1","html_url":"https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.9.10.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/FasterXML/jackson-databind@jackson-databind-2.9.10.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.9.10.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.9.10.1/manifests"},{"name":"jackson-databind-2.6.7.3","sha":"ec1adf8c72625fd51b30105afad7464c4332d542","kind":"tag","published_at":"2019-10-16T04:13:24.000Z","download_url":"https://codeload.github.com/FasterXML/jackson-databind/tar.gz/jackson-databind-2.6.7.3","html_url":"https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.6.7.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/FasterXML/jackson-databind@jackson-databind-2.6.7.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.6.7.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.6.7.3/manifests"},{"name":"jackson-databind-2.10.0","sha":"a1eedfdeea46f2a8da0ed23f06e7e1d39050499b","kind":"tag","published_at":"2019-09-26T03:19:17.000Z","download_url":"https://codeload.github.com/FasterXML/jackson-databind/tar.gz/jackson-databind-2.10.0","html_url":"https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.10.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/FasterXML/jackson-databind@jackson-databind-2.10.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.10.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.10.0/manifests"},{"name":"jackson-databind-2.9.10","sha":"5b33f88541a25999e1c43ca2eda1aeacacd6d13d","kind":"tag","published_at":"2019-09-21T17:59:15.000Z","download_url":"https://codeload.github.com/FasterXML/jackson-databind/tar.gz/jackson-databind-2.9.10","html_url":"https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.9.10","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/FasterXML/jackson-databind@jackson-databind-2.9.10","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.9.10","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.9.10/manifests"},{"name":"jackson-databind-2.10.0.pr3","sha":"45e278af1391b816d193406fb72731f4dac895b0","kind":"tag","published_at":"2019-09-17T02:44:37.000Z","download_url":"https://codeload.github.com/FasterXML/jackson-databind/tar.gz/jackson-databind-2.10.0.pr3","html_url":"https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.10.0.pr3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/FasterXML/jackson-databind@jackson-databind-2.10.0.pr3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.10.0.pr3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.10.0.pr3/manifests"},{"name":"jackson-databind-2.10.0.pr2","sha":"0ac8e1c071044c742f4d33b261593d85cfa25aff","kind":"tag","published_at":"2019-08-31T00:29:01.000Z","download_url":"https://codeload.github.com/FasterXML/jackson-databind/tar.gz/jackson-databind-2.10.0.pr2","html_url":"https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.10.0.pr2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/FasterXML/jackson-databind@jackson-databind-2.10.0.pr2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.10.0.pr2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.10.0.pr2/manifests"},{"name":"jackson-databind-2.9.9.3","sha":"87378d879b16acedd25c8e628570e48822609d52","kind":"tag","published_at":"2019-08-06T01:40:14.000Z","download_url":"https://codeload.github.com/FasterXML/jackson-databind/tar.gz/jackson-databind-2.9.9.3","html_url":"https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.9.9.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/FasterXML/jackson-databind@jackson-databind-2.9.9.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.9.9.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.9.9.3/manifests"},{"name":"jackson-databind-2.9.9.2","sha":"bf93aeb39ee9b1ea1ac4e1625e7d33377d1007f5","kind":"tag","published_at":"2019-07-27T01:09:17.000Z","download_url":"https://codeload.github.com/FasterXML/jackson-databind/tar.gz/jackson-databind-2.9.9.2","html_url":"https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.9.9.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/FasterXML/jackson-databind@jackson-databind-2.9.9.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.9.9.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.9.9.2/manifests"},{"name":"jackson-databind-2.8.11.4","sha":"e013e0f1279b623257d2f0d3ac66b7355db9561d","kind":"tag","published_at":"2019-07-26T05:44:32.000Z","download_url":"https://codeload.github.com/FasterXML/jackson-databind/tar.gz/jackson-databind-2.8.11.4","html_url":"https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.8.11.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/FasterXML/jackson-databind@jackson-databind-2.8.11.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.8.11.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.8.11.4/manifests"},{"name":"jackson-databind-2.7.9.6","sha":"97986cb157d9d1da1256b24ea01b6c9f03b736dd","kind":"tag","published_at":"2019-07-26T05:00:12.000Z","download_url":"https://codeload.github.com/FasterXML/jackson-databind/tar.gz/jackson-databind-2.7.9.6","html_url":"https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.7.9.6","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/FasterXML/jackson-databind@jackson-databind-2.7.9.6","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.7.9.6","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.7.9.6/manifests"},{"name":"jackson-databind-2.10.0.pr1","sha":"7d5f1158363cf9e2201e15702a2fe5e23138531e","kind":"tag","published_at":"2019-07-19T04:15:20.000Z","download_url":"https://codeload.github.com/FasterXML/jackson-databind/tar.gz/jackson-databind-2.10.0.pr1","html_url":"https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.10.0.pr1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/FasterXML/jackson-databind@jackson-databind-2.10.0.pr1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.10.0.pr1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.10.0.pr1/manifests"},{"name":"jackson-databind-2.9.9.1","sha":"8b3269112160067b96b2dd27f9e2b34bd4eed719","kind":"tag","published_at":"2019-07-03T00:31:27.000Z","download_url":"https://codeload.github.com/FasterXML/jackson-databind/tar.gz/jackson-databind-2.9.9.1","html_url":"https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.9.9.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/FasterXML/jackson-databind@jackson-databind-2.9.9.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.9.9.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.9.9.1/manifests"},{"name":"jackson-databind-2.9.9","sha":"a977aadc9c20f6f5be111b7feca7809acd195d25","kind":"tag","published_at":"2019-05-16T03:08:47.000Z","download_url":"https://codeload.github.com/FasterXML/jackson-databind/tar.gz/jackson-databind-2.9.9","html_url":"https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.9.9","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/FasterXML/jackson-databind@jackson-databind-2.9.9","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.9.9","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.9.9/manifests"},{"name":"jackson-databind-2.9.8","sha":"74b90a4a8f5fb0655779ece94b15dafa37716ef5","kind":"tag","published_at":"2018-12-15T21:58:33.000Z","download_url":"https://codeload.github.com/FasterXML/jackson-databind/tar.gz/jackson-databind-2.9.8","html_url":"https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.9.8","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/FasterXML/jackson-databind@jackson-databind-2.9.8","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.9.8","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.9.8/manifests"},{"name":"jackson-databind-2.8.11.3","sha":"71c8143d4b1e2696b27d10cc969b22248e1ab6b6","kind":"tag","published_at":"2018-11-23T18:41:44.000Z","download_url":"https://codeload.github.com/FasterXML/jackson-databind/tar.gz/jackson-databind-2.8.11.3","html_url":"https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.8.11.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/FasterXML/jackson-databind@jackson-databind-2.8.11.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.8.11.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.8.11.3/manifests"},{"name":"jackson-databind-2.7.9.5","sha":"2723191696b098f9b7566a5094a932baf5f7563e","kind":"tag","published_at":"2018-11-23T18:36:25.000Z","download_url":"https://codeload.github.com/FasterXML/jackson-databind/tar.gz/jackson-databind-2.7.9.5","html_url":"https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.7.9.5","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/FasterXML/jackson-databind@jackson-databind-2.7.9.5","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.7.9.5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.7.9.5/manifests"},{"name":"jackson-databind-2.6.7.2","sha":"fab5c3877f7b8ae28a8e3a14d805bc9dcc8c153d","kind":"tag","published_at":"2018-11-13T06:47:43.000Z","download_url":"https://codeload.github.com/FasterXML/jackson-databind/tar.gz/jackson-databind-2.6.7.2","html_url":"https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.6.7.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/FasterXML/jackson-databind@jackson-databind-2.6.7.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.6.7.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.6.7.2/manifests"},{"name":"jackson-databind-2.9.7","sha":"b36c8ac5d8cfce192059fc7c278766e685bf8a6c","kind":"tag","published_at":"2018-09-19T02:48:20.000Z","download_url":"https://codeload.github.com/FasterXML/jackson-databind/tar.gz/jackson-databind-2.9.7","html_url":"https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.9.7","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/FasterXML/jackson-databind@jackson-databind-2.9.7","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.9.7","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.9.7/manifests"},{"name":"jackson-databind-2.9.6","sha":"18eb3683f5527ced27fc0a467f687054d1f98d39","kind":"tag","published_at":"2018-06-12T01:13:48.000Z","download_url":"https://codeload.github.com/FasterXML/jackson-databind/tar.gz/jackson-databind-2.9.6","html_url":"https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.9.6","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/FasterXML/jackson-databind@jackson-databind-2.9.6","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.9.6","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.9.6/manifests"},{"name":"jackson-databind-2.8.11.2","sha":"0dbab948c8e995f786ad31adc0d6f669ddb27642","kind":"tag","published_at":"2018-06-08T05:49:19.000Z","download_url":"https://codeload.github.com/FasterXML/jackson-databind/tar.gz/jackson-databind-2.8.11.2","html_url":"https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.8.11.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/FasterXML/jackson-databind@jackson-databind-2.8.11.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.8.11.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.8.11.2/manifests"},{"name":"jackson-databind-2.7.9.4","sha":"cc654cacb5adcab1e7ddcfb2c2c733d1c61b4147","kind":"tag","published_at":"2018-06-08T05:38:22.000Z","download_url":"https://codeload.github.com/FasterXML/jackson-databind/tar.gz/jackson-databind-2.7.9.4","html_url":"https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.7.9.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/FasterXML/jackson-databind@jackson-databind-2.7.9.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.7.9.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.7.9.4/manifests"},{"name":"jackson-databind-2.9.5","sha":"5c95315ffbaf6f64bd3a2970a001ecce51c10032","kind":"tag","published_at":"2018-03-26T15:13:18.000Z","download_url":"https://codeload.github.com/FasterXML/jackson-databind/tar.gz/jackson-databind-2.9.5","html_url":"https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.9.5","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/FasterXML/jackson-databind@jackson-databind-2.9.5","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.9.5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.9.5/manifests"},{"name":"jackson-databind-2.8.11.1","sha":"efb1370f160feced7a51dca3bf85f9e1949256f0","kind":"tag","published_at":"2018-02-11T03:45:03.000Z","download_url":"https://codeload.github.com/FasterXML/jackson-databind/tar.gz/jackson-databind-2.8.11.1","html_url":"https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.8.11.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/FasterXML/jackson-databind@jackson-databind-2.8.11.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.8.11.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.8.11.1/manifests"},{"name":"jackson-databind-2.7.9.3","sha":"5cacb069a16653844e4c04c2a53578666080c1bb","kind":"tag","published_at":"2018-02-11T03:38:30.000Z","download_url":"https://codeload.github.com/FasterXML/jackson-databind/tar.gz/jackson-databind-2.7.9.3","html_url":"https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.7.9.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/FasterXML/jackson-databind@jackson-databind-2.7.9.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.7.9.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.7.9.3/manifests"},{"name":"jackson-databind-2.9.4","sha":"8b1b40f3a8ab910a065d216e71cd40e7f0828415","kind":"tag","published_at":"2018-01-24T04:06:49.000Z","download_url":"https://codeload.github.com/FasterXML/jackson-databind/tar.gz/jackson-databind-2.9.4","html_url":"https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.9.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/FasterXML/jackson-databind@jackson-databind-2.9.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.9.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.9.4/manifests"},{"name":"jackson-databind-2.8.11","sha":"a6efd882b6df2f8fd1fc20dc24e938d24e91c4db","kind":"tag","published_at":"2017-12-24T02:19:26.000Z","download_url":"https://codeload.github.com/FasterXML/jackson-databind/tar.gz/jackson-databind-2.8.11","html_url":"https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.8.11","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/FasterXML/jackson-databind@jackson-databind-2.8.11","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.8.11","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.8.11/manifests"},{"name":"jackson-databind-2.7.9.2","sha":"9e170e1a28221cf273e8a63e01f1731a9fcd11bc","kind":"tag","published_at":"2017-12-20T03:24:32.000Z","download_url":"https://codeload.github.com/FasterXML/jackson-databind/tar.gz/jackson-databind-2.7.9.2","html_url":"https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.7.9.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/FasterXML/jackson-databind@jackson-databind-2.7.9.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.7.9.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.7.9.2/manifests"},{"name":"jackson-databind-2.9.3","sha":"d4f5fc1b1e53774b85188da1b4ebd5ed09ff6aa5","kind":"tag","published_at":"2017-12-09T03:04:27.000Z","download_url":"https://codeload.github.com/FasterXML/jackson-databind/tar.gz/jackson-databind-2.9.3","html_url":"https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.9.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/FasterXML/jackson-databind@jackson-databind-2.9.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.9.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.9.3/manifests"},{"name":"jackson-databind-2.9.2","sha":"eb137011061187975deedbf56342224e5fce7f5e","kind":"tag","published_at":"2017-10-14T03:28:24.000Z","download_url":"https://codeload.github.com/FasterXML/jackson-databind/tar.gz/jackson-databind-2.9.2","html_url":"https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.9.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/FasterXML/jackson-databind@jackson-databind-2.9.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.9.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.9.2/manifests"},{"name":"jackson-databind-2.9.1","sha":"db38beac4658c7f7e197ca8fc2d2e681907d911e","kind":"tag","published_at":"2017-09-08T01:09:04.000Z","download_url":"https://codeload.github.com/FasterXML/jackson-databind/tar.gz/jackson-databind-2.9.1","html_url":"https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.9.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/FasterXML/jackson-databind@jackson-databind-2.9.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.9.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.9.1/manifests"},{"name":"jackson-databind-2.8.10","sha":"0b6e589c1c0ee20854ac0efeafacbf2782fc9f1c","kind":"tag","published_at":"2017-08-24T04:26:49.000Z","download_url":"https://codeload.github.com/FasterXML/jackson-databind/tar.gz/jackson-databind-2.8.10","html_url":"https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.8.10","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/FasterXML/jackson-databind@jackson-databind-2.8.10","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.8.10","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.8.10/manifests"},{"name":"jackson-databind-2.9.0","sha":"e969f0a31b781f5dfb74e16ddd5ee4b4fa36e8d8","kind":"tag","published_at":"2017-07-30T04:21:11.000Z","download_url":"https://codeload.github.com/FasterXML/jackson-databind/tar.gz/jackson-databind-2.9.0","html_url":"https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.9.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/FasterXML/jackson-databind@jackson-databind-2.9.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.9.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.9.0/manifests"},{"name":"jackson-databind-2.6.7.1","sha":"f7abd682a7b2f8145ecff1c4e205073949f1e623","kind":"tag","published_at":"2017-07-11T04:11:01.000Z","download_url":"https://codeload.github.com/FasterXML/jackson-databind/tar.gz/jackson-databind-2.6.7.1","html_url":"https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.6.7.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/FasterXML/jackson-databind@jackson-databind-2.6.7.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.6.7.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.6.7.1/manifests"},{"name":"jackson-databind-2.9.0.pr4","sha":"822ca4a7db3c3653cea1d0b493e4dfc53d56e15a","kind":"tag","published_at":"2017-06-17T01:19:35.000Z","download_url":"https://codeload.github.com/FasterXML/jackson-databind/tar.gz/jackson-databind-2.9.0.pr4","html_url":"https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.9.0.pr4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/FasterXML/jackson-databind@jackson-databind-2.9.0.pr4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.9.0.pr4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.9.0.pr4/manifests"},{"name":"jackson-databind-2.8.9","sha":"c45ed8c4cbf6c29317bf4cf562558884fa698eec","kind":"tag","published_at":"2017-06-12T00:52:44.000Z","download_url":"https://codeload.github.com/FasterXML/jackson-databind/tar.gz/jackson-databind-2.8.9","html_url":"https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.8.9","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/FasterXML/jackson-databind@jackson-databind-2.8.9","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.8.9","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.8.9/manifests"},{"name":"jackson-databind-2.9.0.pr3","sha":"7541ac546f49d61182d0262df7ca617ef3063bf1","kind":"tag","published_at":"2017-04-25T05:46:00.000Z","download_url":"https://codeload.github.com/FasterXML/jackson-databind/tar.gz/jackson-databind-2.9.0.pr3","html_url":"https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.9.0.pr3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/FasterXML/jackson-databind@jackson-databind-2.9.0.pr3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.9.0.pr3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.9.0.pr3/manifests"},{"name":"jackson-databind-2.8.8.1","sha":"bb89b518edcc29b6d4ba2a12f5d215abd2bf20e1","kind":"tag","published_at":"2017-04-19T15:33:39.000Z","download_url":"https://codeload.github.com/FasterXML/jackson-databind/tar.gz/jackson-databind-2.8.8.1","html_url":"https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.8.8.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/FasterXML/jackson-databind@jackson-databind-2.8.8.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.8.8.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.8.8.1/manifests"},{"name":"jackson-databind-2.7.9.1","sha":"8419c81fad9c7b884b6a02de7b5f1ce5700cbf32","kind":"tag","published_at":"2017-04-18T05:10:57.000Z","download_url":"https://codeload.github.com/FasterXML/jackson-databind/tar.gz/jackson-databind-2.7.9.1","html_url":"https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.7.9.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/FasterXML/jackson-databind@jackson-databind-2.7.9.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.7.9.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.7.9.1/manifests"},{"name":"jackson-databind-2.8.8","sha":"2f93aedf142c98484e0627815e833dc680b88de1","kind":"tag","published_at":"2017-04-05T03:27:53.000Z","download_url":"https://codeload.github.com/FasterXML/jackson-databind/tar.gz/jackson-databind-2.8.8","html_url":"https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.8.8","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/FasterXML/jackson-databind@jackson-databind-2.8.8","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.8.8","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.8.8/manifests"},{"name":"jackson-databind-2.9.0.pr2","sha":"418ee6e0a91401365982794cc9b18a55b26655e5","kind":"tag","published_at":"2017-03-22T03:27:28.000Z","download_url":"https://codeload.github.com/FasterXML/jackson-databind/tar.gz/jackson-databind-2.9.0.pr2","html_url":"https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.9.0.pr2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/FasterXML/jackson-databind@jackson-databind-2.9.0.pr2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.9.0.pr2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.9.0.pr2/manifests"},{"name":"jackson-databind-2.9.0.pr1","sha":"d90fe4c654d1c1d54e24b15deae3ad0443b0f8f6","kind":"tag","published_at":"2017-03-02T18:44:40.000Z","download_url":"https://codeload.github.com/FasterXML/jackson-databind/tar.gz/jackson-databind-2.9.0.pr1","html_url":"https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.9.0.pr1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/FasterXML/jackson-databind@jackson-databind-2.9.0.pr1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.9.0.pr1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.9.0.pr1/manifests"},{"name":"jackson-databind-2.8.7","sha":"b30845f718d50e1fe74d8d040d2a2ef08118371d","kind":"tag","published_at":"2017-02-21T01:06:10.000Z","download_url":"https://codeload.github.com/FasterXML/jackson-databind/tar.gz/jackson-databind-2.8.7","html_url":"https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.8.7","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/FasterXML/jackson-databind@jackson-databind-2.8.7","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.8.7","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.8.7/manifests"},{"name":"jackson-databind-2.7.9","sha":"904b087a7d1075b65cfa30ea1e10ddc49f68d4fb","kind":"tag","published_at":"2017-02-04T19:21:14.000Z","download_url":"https://codeload.github.com/FasterXML/jackson-databind/tar.gz/jackson-databind-2.7.9","html_url":"https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.7.9","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/FasterXML/jackson-databind@jackson-databind-2.7.9","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.7.9","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.7.9/manifests"},{"name":"jackson-databind-2.8.6","sha":"9dbe3d2dbe218d96a20681ef1d6c7ee78b065dcf","kind":"tag","published_at":"2017-01-12T04:39:11.000Z","download_url":"https://codeload.github.com/FasterXML/jackson-databind/tar.gz/jackson-databind-2.8.6","html_url":"https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.8.6","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/FasterXML/jackson-databind@jackson-databind-2.8.6","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.8.6","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.8.6/manifests"},{"name":"jackson-databind-2.8.5","sha":"a9c018137ef2e7be5dad0f10d319475f16e976e8","kind":"tag","published_at":"2016-11-14T06:13:03.000Z","download_url":"https://codeload.github.com/FasterXML/jackson-databind/tar.gz/jackson-databind-2.8.5","html_url":"https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.8.5","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/FasterXML/jackson-databind@jackson-databind-2.8.5","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.8.5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.8.5/manifests"},{"name":"jackson-databind-2.8.4","sha":"e913b10a67910ee5084cba9c226816c728a1f376","kind":"tag","published_at":"2016-10-14T03:50:59.000Z","download_url":"https://codeload.github.com/FasterXML/jackson-databind/tar.gz/jackson-databind-2.8.4","html_url":"https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.8.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/FasterXML/jackson-databind@jackson-databind-2.8.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.8.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.8.4/manifests"},{"name":"jackson-databind-2.7.8","sha":"753f460191133f5623ee3e24eac0dea6f20406ff","kind":"tag","published_at":"2016-09-26T14:50:00.000Z","download_url":"https://codeload.github.com/FasterXML/jackson-databind/tar.gz/jackson-databind-2.7.8","html_url":"https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.7.8","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/FasterXML/jackson-databind@jackson-databind-2.7.8","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.7.8","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.7.8/manifests"},{"name":"jackson-databind-2.8.3","sha":"46ea49151b44cad33a8021ed2e8ce655089b2235","kind":"tag","published_at":"2016-09-18T01:29:37.000Z","download_url":"https://codeload.github.com/FasterXML/jackson-databind/tar.gz/jackson-databind-2.8.3","html_url":"https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.8.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/FasterXML/jackson-databind@jackson-databind-2.8.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.8.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.8.3/manifests"},{"name":"jackson-databind-2.8.2","sha":"761d563caacd5affbc6dddf137332e96da6b9ab6","kind":"tag","published_at":"2016-08-30T00:43:14.000Z","download_url":"https://codeload.github.com/FasterXML/jackson-databind/tar.gz/jackson-databind-2.8.2","html_url":"https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.8.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/FasterXML/jackson-databind@jackson-databind-2.8.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.8.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.8.2/manifests"},{"name":"jackson-databind-2.7.7","sha":"9fc02765ca4338d6ffe4334421cdc5034ecf9959","kind":"tag","published_at":"2016-08-26T21:52:59.000Z","download_url":"https://codeload.github.com/FasterXML/jackson-databind/tar.gz/jackson-databind-2.7.7","html_url":"https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.7.7","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/FasterXML/jackson-databind@jackson-databind-2.7.7","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.7.7","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.7.7/manifests"},{"name":"jackson-databind-2.7.6","sha":"cca37af655ae31317b0aa8663f0dcddb3473bbcc","kind":"tag","published_at":"2016-07-23T02:36:54.000Z","download_url":"https://codeload.github.com/FasterXML/jackson-databind/tar.gz/jackson-databind-2.7.6","html_url":"https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.7.6","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/FasterXML/jackson-databind@jackson-databind-2.7.6","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.7.6","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.7.6/manifests"},{"name":"jackson-databind-2.8.1","sha":"111e86d18cf460fff06292c3eb2c140475dd9308","kind":"tag","published_at":"2016-07-19T23:23:07.000Z","download_url":"https://codeload.github.com/FasterXML/jackson-databind/tar.gz/jackson-databind-2.8.1","html_url":"https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.8.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/FasterXML/jackson-databind@jackson-databind-2.8.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.8.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.8.1/manifests"},{"name":"jackson-databind-2.8.0","sha":"81929fad84189ce59ef82e7a6d0df795eb0c7cdb","kind":"tag","published_at":"2016-07-04T05:49:20.000Z","download_url":"https://codeload.github.com/FasterXML/jackson-databind/tar.gz/jackson-databind-2.8.0","html_url":"https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.8.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/FasterXML/jackson-databind@jackson-databind-2.8.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.8.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.8.0/manifests"},{"name":"jackson-databind-2.7.5","sha":"096314fb2f5ee0d69d207783710156d680fc96ff","kind":"tag","published_at":"2016-06-11T02:12:30.000Z","download_url":"https://codeload.github.com/FasterXML/jackson-databind/tar.gz/jackson-databind-2.7.5","html_url":"https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.7.5","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/FasterXML/jackson-databind@jackson-databind-2.7.5","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.7.5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.7.5/manifests"},{"name":"jackson-databind-2.6.7","sha":"4ef3de0d1b393f2e4dbe655b4684c0b31e96a5b1","kind":"tag","published_at":"2016-06-05T21:08:16.000Z","download_url":"https://codeload.github.com/FasterXML/jackson-databind/tar.gz/jackson-databind-2.6.7","html_url":"https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.6.7","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/FasterXML/jackson-databind@jackson-databind-2.6.7","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.6.7","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.6.7/manifests"},{"name":"jackson-databind-2.7.4","sha":"ed6c4262324e0024f3d016b11307e4821b758f37","kind":"tag","published_at":"2016-04-29T15:45:13.000Z","download_url":"https://codeload.github.com/FasterXML/jackson-databind/tar.gz/jackson-databind-2.7.4","html_url":"https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.7.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/FasterXML/jackson-databind@jackson-databind-2.7.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.7.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.7.4/manifests"},{"name":"jackson-databind-2.6.6","sha":"6c76749cad9d3e414e187d5d5880fa015fbf8bf7","kind":"tag","published_at":"2016-04-05T01:22:29.000Z","download_url":"https://codeload.github.com/FasterXML/jackson-databind/tar.gz/jackson-databind-2.6.6","html_url":"https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.6.6","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/FasterXML/jackson-databind@jackson-databind-2.6.6","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.6.6","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.6.6/manifests"},{"name":"jackson-databind-2.7.3","sha":"ec8db26e537c32ec6b1f5535c48116cd54ea6c70","kind":"tag","published_at":"2016-03-16T01:26:28.000Z","download_url":"https://codeload.github.com/FasterXML/jackson-databind/tar.gz/jackson-databind-2.7.3","html_url":"https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.7.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/FasterXML/jackson-databind@jackson-databind-2.7.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.7.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.7.3/manifests"},{"name":"jackson-databind-2.7.2","sha":"4069c66ca378cce5f78193057640d08029ffeba4","kind":"tag","published_at":"2016-02-27T04:35:41.000Z","download_url":"https://codeload.github.com/FasterXML/jackson-databind/tar.gz/jackson-databind-2.7.2","html_url":"https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.7.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/FasterXML/jackson-databind@jackson-databind-2.7.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.7.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.7.2/manifests"},{"name":"jackson-databind-2.7.1-1","sha":"7be8815590d097f32eadaef017b6de2ebb2030b1","kind":"tag","published_at":"2016-02-04T00:30:41.000Z","download_url":"https://codeload.github.com/FasterXML/jackson-databind/tar.gz/jackson-databind-2.7.1-1","html_url":"https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.7.1-1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/FasterXML/jackson-databind@jackson-databind-2.7.1-1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.7.1-1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.7.1-1/manifests"},{"name":"jackson-databind-2.7.1","sha":"ce9dc07af83f77568a613fd45a86f58c93ba1a02","kind":"tag","published_at":"2016-02-02T06:14:40.000Z","download_url":"https://codeload.github.com/FasterXML/jackson-databind/tar.gz/jackson-databind-2.7.1","html_url":"https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.7.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/FasterXML/jackson-databind@jackson-databind-2.7.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.7.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.7.1/manifests"},{"name":"jackson-databind-2.6.5","sha":"55980bc9133c2d9e2a7a36b08a4392a31be17320","kind":"tag","published_at":"2016-01-19T04:54:02.000Z","download_url":"https://codeload.github.com/FasterXML/jackson-databind/tar.gz/jackson-databind-2.6.5","html_url":"https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.6.5","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/FasterXML/jackson-databind@jackson-databind-2.6.5","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.6.5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.6.5/manifests"},{"name":"jackson-databind-2.7.0","sha":"50791cc7856376949287e0be3e96147665ab8f68","kind":"tag","published_at":"2016-01-10T06:08:19.000Z","download_url":"https://codeload.github.com/FasterXML/jackson-databind/tar.gz/jackson-databind-2.7.0","html_url":"https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.7.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/FasterXML/jackson-databind@jackson-databind-2.7.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.7.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.7.0/manifests"},{"name":"jackson-databind-2.7.0-rc3","sha":"97b469461c495ca3a85dfcac423ea1866c7ddb09","kind":"tag","published_at":"2016-01-06T06:22:42.000Z","download_url":"https://codeload.github.com/FasterXML/jackson-databind/tar.gz/jackson-databind-2.7.0-rc3","html_url":"https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.7.0-rc3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/FasterXML/jackson-databind@jackson-databind-2.7.0-rc3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.7.0-rc3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.7.0-rc3/manifests"},{"name":"jackson-databind-2.7.0-rc2","sha":"4a066c67a771934496bc7020fbb18b32307f829c","kind":"tag","published_at":"2015-12-12T01:57:49.000Z","download_url":"https://codeload.github.com/FasterXML/jackson-databind/tar.gz/jackson-databind-2.7.0-rc2","html_url":"https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.7.0-rc2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/FasterXML/jackson-databind@jackson-databind-2.7.0-rc2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.7.0-rc2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.7.0-rc2/manifests"},{"name":"jackson-databind-2.5.5","sha":"1e3d3ca4e74bbdd0240e14e71655fdb400bb51a3","kind":"tag","published_at":"2015-12-08T02:41:49.000Z","download_url":"https://codeload.github.com/FasterXML/jackson-databind/tar.gz/jackson-databind-2.5.5","html_url":"https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.5.5","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/FasterXML/jackson-databind@jackson-databind-2.5.5","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.5.5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.5.5/manifests"},{"name":"jackson-databind-2.6.4","sha":"1160115bf551da1a50081d701c716a5150cd87d2","kind":"tag","published_at":"2015-12-08T02:31:20.000Z","download_url":"https://codeload.github.com/FasterXML/jackson-databind/tar.gz/jackson-databind-2.6.4","html_url":"https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.6.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/FasterXML/jackson-databind@jackson-databind-2.6.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.6.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.6.4/manifests"},{"name":"jackson-databind-2.7.0-rc1","sha":"02450fc97b9d3c7ce1f5256181abbaaa463005a4","kind":"tag","published_at":"2015-11-26T21:34:55.000Z","download_url":"https://codeload.github.com/FasterXML/jackson-databind/tar.gz/jackson-databind-2.7.0-rc1","html_url":"https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.7.0-rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/FasterXML/jackson-databind@jackson-databind-2.7.0-rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.7.0-rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.7.0-rc1/manifests"},{"name":"jackson-databind-2.6.3","sha":"547ba8e7d2c1ed686b095c5253f96b038d39f87b","kind":"tag","published_at":"2015-10-12T18:30:25.000Z","download_url":"https://codeload.github.com/FasterXML/jackson-databind/tar.gz/jackson-databind-2.6.3","html_url":"https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.6.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/FasterXML/jackson-databind@jackson-databind-2.6.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.6.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.6.3/manifests"},{"name":"jackson-databind-2.6.2","sha":"3739d9dfbf24b6822b90274ba346ad209eb289fd","kind":"tag","published_at":"2015-09-15T04:59:38.000Z","download_url":"https://codeload.github.com/FasterXML/jackson-databind/tar.gz/jackson-databind-2.6.2","html_url":"https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.6.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/FasterXML/jackson-databind@jackson-databind-2.6.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.6.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.6.2/manifests"},{"name":"jackson-databind-2.6.1","sha":"060726b011b008496cd8bb0997ee94a6b73530d1","kind":"tag","published_at":"2015-08-10T05:25:49.000Z","download_url":"https://codeload.github.com/FasterXML/jackson-databind/tar.gz/jackson-databind-2.6.1","html_url":"https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.6.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/FasterXML/jackson-databind@jackson-databind-2.6.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.6.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.6.1/manifests"},{"name":"jackson-databind-2.6.0","sha":"21f90cf247018c1286cc20544029782450dc270a","kind":"tag","published_at":"2015-07-19T18:37:46.000Z","download_url":"https://codeload.github.com/FasterXML/jackson-databind/tar.gz/jackson-databind-2.6.0","html_url":"https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.6.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/FasterXML/jackson-databind@jackson-databind-2.6.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.6.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.6.0/manifests"},{"name":"jackson-databind-2.6.0-rc4","sha":"521515d6fb96f68e2049d8bedbfb2117770bfcc0","kind":"tag","published_at":"2015-07-11T03:42:03.000Z","download_url":"https://codeload.github.com/FasterXML/jackson-databind/tar.gz/jackson-databind-2.6.0-rc4","html_url":"https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.6.0-rc4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/FasterXML/jackson-databind@jackson-databind-2.6.0-rc4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.6.0-rc4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.6.0-rc4/manifests"},{"name":"2.6.0-rc3b","sha":"485d444d9d26c2e1a12ad0697ce79066cdb5b8b3","kind":"tag","published_at":"2015-06-25T03:28:54.000Z","download_url":"https://codeload.github.com/FasterXML/jackson-databind/tar.gz/2.6.0-rc3b","html_url":"https://github.com/FasterXML/jackson-databind/releases/tag/2.6.0-rc3b","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/FasterXML/jackson-databind@2.6.0-rc3b","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/2.6.0-rc3b","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/2.6.0-rc3b/manifests"},{"name":"jackson-databind-2.5.4","sha":"f693ae583c7777478872da59ff473e58fda3434f","kind":"tag","published_at":"2015-06-10T01:42:29.000Z","download_url":"https://codeload.github.com/FasterXML/jackson-databind/tar.gz/jackson-databind-2.5.4","html_url":"https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.5.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/FasterXML/jackson-databind@jackson-databind-2.5.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.5.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.5.4/manifests"},{"name":"jackson-databind-2.4.6.1","sha":"e21d7a73d57de235ee4d3718f9f9dede87715e72","kind":"tag","published_at":"2015-06-10T00:38:23.000Z","download_url":"https://codeload.github.com/FasterXML/jackson-databind/tar.gz/jackson-databind-2.4.6.1","html_url":"https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.4.6.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/FasterXML/jackson-databind@jackson-databind-2.4.6.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.4.6.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.4.6.1/manifests"},{"name":"jackson-databind-2.6.0-rc2","sha":"b9a552cf9c89aaa8dc26895cb2ef72b738301870","kind":"tag","published_at":"2015-06-09T01:42:49.000Z","download_url":"https://codeload.github.com/FasterXML/jackson-databind/tar.gz/jackson-databind-2.6.0-rc2","html_url":"https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.6.0-rc2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/FasterXML/jackson-databind@jackson-databind-2.6.0-rc2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.6.0-rc2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.6.0-rc2/manifests"},{"name":"jackson-databind-2.6.0-rc1","sha":"5286441eecb890778d7c524482bd41d583452d92","kind":"tag","published_at":"2015-05-19T03:15:08.000Z","download_url":"https://codeload.github.com/FasterXML/jackson-databind/tar.gz/jackson-databind-2.6.0-rc1","html_url":"https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.6.0-rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/FasterXML/jackson-databind@jackson-databind-2.6.0-rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.6.0-rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.6.0-rc1/manifests"},{"name":"jackson-databind-2.5.3","sha":"a29cb29501ac6b3e6c8ca6fed876a4d7d52a7faa","kind":"tag","published_at":"2015-04-24T17:23:25.000Z","download_url":"https://codeload.github.com/FasterXML/jackson-databind/tar.gz/jackson-databind-2.5.3","html_url":"https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.5.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/FasterXML/jackson-databind@jackson-databind-2.5.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.5.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.5.3/manifests"},{"name":"jackson-databind-2.4.6","sha":"ed7b0c3ac0b163c3cf9d71a5af10bc396655c233","kind":"tag","published_at":"2015-04-24T01:40:58.000Z","download_url":"https://codeload.github.com/FasterXML/jackson-databind/tar.gz/jackson-databind-2.4.6","html_url":"https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.4.6","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/FasterXML/jackson-databind@jackson-databind-2.4.6","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.4.6","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.4.6/manifests"},{"name":"jackson-databind-2.5.2","sha":"636018b11cf7c23cc9647f0c11aaca1ba11a1935","kind":"tag","published_at":"2015-03-29T23:50:52.000Z","download_url":"https://codeload.github.com/FasterXML/jackson-databind/tar.gz/jackson-databind-2.5.2","html_url":"https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.5.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/FasterXML/jackson-databind@jackson-databind-2.5.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.5.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.5.2/manifests"},{"name":"jackson-databind-2.4.5.1","sha":"19ac8a4aff21d5f2f57765b684675f21786771d3","kind":"tag","published_at":"2015-03-27T02:57:27.000Z","download_url":"https://codeload.github.com/FasterXML/jackson-databind/tar.gz/jackson-databind-2.4.5.1","html_url":"https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.4.5.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/FasterXML/jackson-databind@jackson-databind-2.4.5.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.4.5.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.4.5.1/manifests"},{"name":"jackson-databind-2.5.1","sha":"bc5b910e790e5cbf460a60751127b647656e0cb7","kind":"tag","published_at":"2015-02-07T00:09:20.000Z","download_url":"https://codeload.github.com/FasterXML/jackson-databind/tar.gz/jackson-databind-2.5.1","html_url":"https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.5.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/FasterXML/jackson-databind@jackson-databind-2.5.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.5.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.5.1/manifests"},{"name":"jackson-databind-2.3.5","sha":"c971ef156e231aea59ab3a1561761cef89bd9fd1","kind":"tag","published_at":"2015-01-14T06:27:42.000Z","download_url":"https://codeload.github.com/FasterXML/jackson-databind/tar.gz/jackson-databind-2.3.5","html_url":"https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.3.5","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/FasterXML/jackson-databind@jackson-databind-2.3.5","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.3.5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.3.5/manifests"},{"name":"jackson-databind-2.4.5","sha":"fe0462745d12cb6ca135a2d1bda26e1c68d6b687","kind":"tag","published_at":"2015-01-14T04:24:05.000Z","download_url":"https://codeload.github.com/FasterXML/jackson-databind/tar.gz/jackson-databind-2.4.5","html_url":"https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.4.5","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/FasterXML/jackson-databind@jackson-databind-2.4.5","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.4.5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.4.5/manifests"},{"name":"jackson-databind-2.5.0","sha":"9efc4abb22c664c492271bc9907bbfbf4f70889c","kind":"tag","published_at":"2015-01-02T01:44:08.000Z","download_url":"https://codeload.github.com/FasterXML/jackson-databind/tar.gz/jackson-databind-2.5.0","html_url":"https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.5.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/FasterXML/jackson-databind@jackson-databind-2.5.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.5.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.5.0/manifests"},{"name":"jackson-databind-2.5.0-rc1","sha":"cd4381f08082b66115a7dbc39dae33a30ceb150a","kind":"tag","published_at":"2014-12-20T01:50:37.000Z","download_url":"https://codeload.github.com/FasterXML/jackson-databind/tar.gz/jackson-databind-2.5.0-rc1","html_url":"https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.5.0-rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/FasterXML/jackson-databind@jackson-databind-2.5.0-rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.5.0-rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.5.0-rc1/manifests"},{"name":"jackson-databind-2.4.4","sha":"ecfe3f46aff79f6f51600841920010200b923d83","kind":"tag","published_at":"2014-11-25T02:26:47.000Z","download_url":"https://codeload.github.com/FasterXML/jackson-databind/tar.gz/jackson-databind-2.4.4","html_url":"https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.4.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/FasterXML/jackson-databind@jackson-databind-2.4.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.4.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.4.4/manifests"},{"name":"jackson-databind-2.4.3","sha":"1f5dc0a4f67598266cd77f389ee808e15990477a","kind":"tag","published_at":"2014-10-03T06:23:10.000Z","download_url":"https://codeload.github.com/FasterXML/jackson-databind/tar.gz/jackson-databind-2.4.3","html_url":"https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.4.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/FasterXML/jackson-databind@jackson-databind-2.4.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.4.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.4.3/manifests"},{"name":"jackson-databind-2.4.2","sha":"824bd1e3ca9d69e6490d9ce99e541663ceb3664b","kind":"tag","published_at":"2014-08-14T04:22:02.000Z","download_url":"https://codeload.github.com/FasterXML/jackson-databind/tar.gz/jackson-databind-2.4.2","html_url":"https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.4.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/FasterXML/jackson-databind@jackson-databind-2.4.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.4.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.4.2/manifests"},{"name":"jackson-databind-2.3.4","sha":"27a2dcecebcb2b6a26868e4c321434643a601a19","kind":"tag","published_at":"2014-07-17T22:46:41.000Z","download_url":"https://codeload.github.com/FasterXML/jackson-databind/tar.gz/jackson-databind-2.3.4","html_url":"https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.3.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/FasterXML/jackson-databind@jackson-databind-2.3.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.3.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.3.4/manifests"},{"name":"jackson-databind-2.4.1.3","sha":"1e6c8b0a442a124e6bbcc9267463a58f48c7876f","kind":"tag","published_at":"2014-07-15T05:31:48.000Z","download_url":"https://codeload.github.com/FasterXML/jackson-databind/tar.gz/jackson-databind-2.4.1.3","html_url":"https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.4.1.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/FasterXML/jackson-databind@jackson-databind-2.4.1.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.4.1.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.4.1.3/manifests"},{"name":"jackson-databind-2.4.1.2","sha":"735b88abc3dea908bc59f7373f22d58a6cbb6d35","kind":"tag","published_at":"2014-07-12T22:26:10.000Z","download_url":"https://codeload.github.com/FasterXML/jackson-databind/tar.gz/jackson-databind-2.4.1.2","html_url":"https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.4.1.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/FasterXML/jackson-databind@jackson-databind-2.4.1.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.4.1.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.4.1.2/manifests"},{"name":"jackson-databind-2.4.1.1","sha":"cbd3f169e8e32d130ac64c8853310577e766713c","kind":"tag","published_at":"2014-06-18T22:30:11.000Z","download_url":"https://codeload.github.com/FasterXML/jackson-databind/tar.gz/jackson-databind-2.4.1.1","html_url":"https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.4.1.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/FasterXML/jackson-databind@jackson-databind-2.4.1.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.4.1.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.4.1.1/manifests"},{"name":"jackson-databind-2.4.1","sha":"7a095bcc66b228ea48e37c57eafd7d78ce5c090c","kind":"tag","published_at":"2014-06-18T02:10:46.000Z","download_url":"https://codeload.github.com/FasterXML/jackson-databind/tar.gz/jackson-databind-2.4.1","html_url":"https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.4.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/FasterXML/jackson-databind@jackson-databind-2.4.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.4.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.4.1/manifests"},{"name":"jackson-databind-2.2.4","sha":"9dea88f68707f358f7b27cce97381b00112eb343","kind":"tag","published_at":"2014-06-11T00:29:12.000Z","download_url":"https://codeload.github.com/FasterXML/jackson-databind/tar.gz/jackson-databind-2.2.4","html_url":"https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.2.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/FasterXML/jackson-databind@jackson-databind-2.2.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.2.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.2.4/manifests"},{"name":"jackson-databind-2.4.0","sha":"a5807c566af27b184731dd4eb7dfcc420962db32","kind":"tag","published_at":"2014-06-03T00:49:06.000Z","download_url":"https://codeload.github.com/FasterXML/jackson-databind/tar.gz/jackson-databind-2.4.0","html_url":"https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.4.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/FasterXML/jackson-databind@jackson-databind-2.4.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.4.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.4.0/manifests"},{"name":"jackson-databind-2.4.0-rc3","sha":"1790b1b43c2575033ecca0817e2aae5fb607f3ce","kind":"tag","published_at":"2014-05-08T21:13:28.000Z","download_url":"https://codeload.github.com/FasterXML/jackson-databind/tar.gz/jackson-databind-2.4.0-rc3","html_url":"https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.4.0-rc3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/FasterXML/jackson-databind@jackson-databind-2.4.0-rc3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.4.0-rc3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.4.0-rc3/manifests"},{"name":"jackson-databind-2.4.0-rc2","sha":"c48dd6fcdea43aefafa813979afb0c4835532db8","kind":"tag","published_at":"2014-04-30T15:31:10.000Z","download_url":"https://codeload.github.com/FasterXML/jackson-databind/tar.gz/jackson-databind-2.4.0-rc2","html_url":"https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.4.0-rc2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/FasterXML/jackson-databind@jackson-databind-2.4.0-rc2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.4.0-rc2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.4.0-rc2/manifests"},{"name":"jackson-databind-2.4.0-rc1","sha":"75b97b8519f0d50c62523ad85170d80a197a2c86","kind":"tag","published_at":"2014-04-26T19:28:20.000Z","download_url":"https://codeload.github.com/FasterXML/jackson-databind/tar.gz/jackson-databind-2.4.0-rc1","html_url":"https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.4.0-rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/FasterXML/jackson-databind@jackson-databind-2.4.0-rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.4.0-rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.4.0-rc1/manifests"},{"name":"jackson-databind-2.3.3","sha":"f685aac3469bc32db751990c40884f9370b904cc","kind":"tag","published_at":"2014-04-10T16:53:48.000Z","download_url":"https://codeload.github.com/FasterXML/jackson-databind/tar.gz/jackson-databind-2.3.3","html_url":"https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.3.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/FasterXML/jackson-databind@jackson-databind-2.3.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.3.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.3.3/manifests"},{"name":"jackson-databind-2.3.2","sha":"2a2932873c70758628f445f53b11077650ac9e6d","kind":"tag","published_at":"2014-03-02T03:11:26.000Z","download_url":"https://codeload.github.com/FasterXML/jackson-databind/tar.gz/jackson-databind-2.3.2","html_url":"https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.3.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/FasterXML/jackson-databind@jackson-databind-2.3.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.3.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.3.2/manifests"},{"name":"jackson-databind-2.3.1","sha":"8ec79ecf31523184c0062e1c69f6ca8da13009bf","kind":"tag","published_at":"2013-12-28T02:23:18.000Z","download_url":"https://codeload.github.com/FasterXML/jackson-databind/tar.gz/jackson-databind-2.3.1","html_url":"https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.3.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/FasterXML/jackson-databind@jackson-databind-2.3.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.3.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.3.1/manifests"},{"name":"jackson-databind-2.3.0","sha":"0db57763dd4fca9a8adad1bbf2e96969df11abee","kind":"tag","published_at":"2013-11-14T05:19:56.000Z","download_url":"https://codeload.github.com/FasterXML/jackson-databind/tar.gz/jackson-databind-2.3.0","html_url":"https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.3.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/FasterXML/jackson-databind@jackson-databind-2.3.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.3.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.3.0/manifests"},{"name":"jackson-databind-2.3.0-rc1","sha":"e2d273ec394f02a0e8d5d962f7d45821cc44aaef","kind":"tag","published_at":"2013-10-26T02:59:58.000Z","download_url":"https://codeload.github.com/FasterXML/jackson-databind/tar.gz/jackson-databind-2.3.0-rc1","html_url":"https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.3.0-rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/FasterXML/jackson-databind@jackson-databind-2.3.0-rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.3.0-rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.3.0-rc1/manifests"},{"name":"jackson-databind-2.2.3","sha":"22a9ec205e4f400a4adfde76db75fe3c6c33f794","kind":"tag","published_at":"2013-08-23T03:22:41.000Z","download_url":"https://codeload.github.com/FasterXML/jackson-databind/tar.gz/jackson-databind-2.2.3","html_url":"https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.2.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/FasterXML/jackson-databind@jackson-databind-2.2.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.2.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.2.3/manifests"},{"name":"jackson-databind-2.2.2","sha":"b8d01a7df1c1f3c682200fdefe99f5a7291f729d","kind":"tag","published_at":"2013-05-27T05:22:09.000Z","download_url":"https://codeload.github.com/FasterXML/jackson-databind/tar.gz/jackson-databind-2.2.2","html_url":"https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.2.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/FasterXML/jackson-databind@jackson-databind-2.2.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.2.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.2.2/manifests"},{"name":"jackson-databind-2.2.1","sha":"1cb7e91cc8114b7ea2b584707cd021f44aeea5e3","kind":"tag","published_at":"2013-05-04T01:16:46.000Z","download_url":"https://codeload.github.com/FasterXML/jackson-databind/tar.gz/jackson-databind-2.2.1","html_url":"https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.2.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/FasterXML/jackson-databind@jackson-databind-2.2.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.2.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.2.1/manifests"},{"name":"jackson-databind-2.1.5","sha":"4652fb9ec3c45a232a65272e0f50b324bcd24249","kind":"tag","published_at":"2013-05-03T03:08:15.000Z","download_url":"https://codeload.github.com/FasterXML/jackson-databind/tar.gz/jackson-databind-2.1.5","html_url":"https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.1.5","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/FasterXML/jackson-databind@jackson-databind-2.1.5","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.1.5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.1.5/manifests"},{"name":"2.2.0c","sha":"c63a436a43333cb4a0c385e6fab2401d77e69378","kind":"tag","published_at":"2013-04-23T04:02:21.000Z","download_url":"https://codeload.github.com/FasterXML/jackson-databind/tar.gz/2.2.0c","html_url":"https://github.com/FasterXML/jackson-databind/releases/tag/2.2.0c","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/FasterXML/jackson-databind@2.2.0c","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/2.2.0c","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/2.2.0c/manifests"},{"name":"jackson-databind-2.2.0","sha":"f03eb1d4f9b9e1841d65f57191f971d7425d8274","kind":"tag","published_at":"2013-04-23T02:51:20.000Z","download_url":"https://codeload.github.com/FasterXML/jackson-databind/tar.gz/jackson-databind-2.2.0","html_url":"https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.2.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/FasterXML/jackson-databind@jackson-databind-2.2.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.2.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.2.0/manifests"},{"name":"jackson-databind-2.2.0-rc1","sha":"84785f8658a28adf30fbb55e55906ac55d874e22","kind":"tag","published_at":"2013-04-18T01:55:38.000Z","download_url":"https://codeload.github.com/FasterXML/jackson-databind/tar.gz/jackson-databind-2.2.0-rc1","html_url":"https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.2.0-rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/FasterXML/jackson-databind@jackson-databind-2.2.0-rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.2.0-rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.2.0-rc1/manifests"},{"name":"jackson-databind-2.1.4","sha":"90f3125c222668255db99bcbb7fb2a6cb5d886e6","kind":"tag","published_at":"2013-02-26T23:13:55.000Z","download_url":"https://codeload.github.com/FasterXML/jackson-databind/tar.gz/jackson-databind-2.1.4","html_url":"https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.1.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/FasterXML/jackson-databind@jackson-databind-2.1.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.1.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.1.4/manifests"},{"name":"jackson-databind-2.1.3","sha":"fef1a9992f3c314a9672a952d8dfd394959f9d6e","kind":"tag","published_at":"2013-01-19T21:10:37.000Z","download_url":"https://codeload.github.com/FasterXML/jackson-databind/tar.gz/jackson-databind-2.1.3","html_url":"https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.1.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/FasterXML/jackson-databind@jackson-databind-2.1.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.1.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.1.3/manifests"},{"name":"jackson-databind-2.1.2","sha":"88d0b78c0a94a02bdba778da298968085db8a164","kind":"tag","published_at":"2012-12-04T06:05:33.000Z","download_url":"https://codeload.github.com/FasterXML/jackson-databind/tar.gz/jackson-databind-2.1.2","html_url":"https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.1.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/FasterXML/jackson-databind@jackson-databind-2.1.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.1.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.1.2/manifests"},{"name":"jackson-databind-2.1.1","sha":"e2455c786aa361b725f5cb14e246c32469c8efa5","kind":"tag","published_at":"2012-11-11T23:51:13.000Z","download_url":"https://codeload.github.com/FasterXML/jackson-databind/tar.gz/jackson-databind-2.1.1","html_url":"https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.1.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/FasterXML/jackson-databind@jackson-databind-2.1.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.1.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.1.1/manifests"},{"name":"jackson-databind-2.1.0","sha":"e997f1270f6c3d5c1443755e51ecc580eaf943c6","kind":"tag","published_at":"2012-10-10T00:13:39.000Z","download_url":"https://codeload.github.com/FasterXML/jackson-databind/tar.gz/jackson-databind-2.1.0","html_url":"https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/FasterXML/jackson-databind@jackson-databind-2.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.1.0/manifests"},{"name":"jackson-databind-2.0.6","sha":"391d11353cd8a5fb6f84d001105a37234a457a71","kind":"tag","published_at":"2012-09-06T03:19:05.000Z","download_url":"https://codeload.github.com/FasterXML/jackson-databind/tar.gz/jackson-databind-2.0.6","html_url":"https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.0.6","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/FasterXML/jackson-databind@jackson-databind-2.0.6","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.0.6","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.0.6/manifests"},{"name":"jackson-databind-2.0.5","sha":"d82198dafdb99fe52e96f50c07046e43836a73e1","kind":"tag","published_at":"2012-07-27T22:58:16.000Z","download_url":"https://codeload.github.com/FasterXML/jackson-databind/tar.gz/jackson-databind-2.0.5","html_url":"https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.0.5","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/FasterXML/jackson-databind@jackson-databind-2.0.5","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.0.5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.0.5/manifests"},{"name":"jackson-databind-2.0.4","sha":"67cd09aba9f75f1ebbc664d7e929a6105ac3413b","kind":"tag","published_at":"2012-06-27T05:14:45.000Z","download_url":"https://codeload.github.com/FasterXML/jackson-databind/tar.gz/jackson-databind-2.0.4","html_url":"https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.0.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/FasterXML/jackson-databind@jackson-databind-2.0.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.0.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.0.4/manifests"},{"name":"jackson-databind-2.0.2","sha":"3f186e18ad8bd349b28aacd7fb1fb34957b5b71e","kind":"tag","published_at":"2012-05-15T02:14:37.000Z","download_url":"https://codeload.github.com/FasterXML/jackson-databind/tar.gz/jackson-databind-2.0.2","html_url":"https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.0.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/FasterXML/jackson-databind@jackson-databind-2.0.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.0.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.0.2/manifests"},{"name":"jackson-databind-2.0.1","sha":"a253fd38e6b975ce4e10ab6470dd8f57838a553c","kind":"tag","published_at":"2012-04-24T01:57:11.000Z","download_url":"https://codeload.github.com/FasterXML/jackson-databind/tar.gz/jackson-databind-2.0.1","html_url":"https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.0.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/FasterXML/jackson-databind@jackson-databind-2.0.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.0.1/manifests"},{"name":"jackson-databind-2.0.0","sha":"e8df0987e3034d102ee6d704d30a05a2e3ac7089","kind":"tag","published_at":"2012-03-25T19:09:14.000Z","download_url":"https://codeload.github.com/FasterXML/jackson-databind/tar.gz/jackson-databind-2.0.0","html_url":"https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/FasterXML/jackson-databind@jackson-databind-2.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.0.0/manifests"},{"name":"jackson-databind-2.0.0-RC3","sha":"f04929a744b10694a8af73cf1f33dfbb0226bbc4","kind":"tag","published_at":"2012-03-23T00:15:59.000Z","download_url":"https://codeload.github.com/FasterXML/jackson-databind/tar.gz/jackson-databind-2.0.0-RC3","html_url":"https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.0.0-RC3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/FasterXML/jackson-databind@jackson-databind-2.0.0-RC3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.0.0-RC3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.0.0-RC3/manifests"},{"name":"jackson-databind-2.0.0-RC2","sha":"ab22e8281836fd197bc6943e277f4aa0d0c953e3","kind":"tag","published_at":"2012-03-06T07:00:25.000Z","download_url":"https://codeload.github.com/FasterXML/jackson-databind/tar.gz/jackson-databind-2.0.0-RC2","html_url":"https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.0.0-RC2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/FasterXML/jackson-databind@jackson-databind-2.0.0-RC2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.0.0-RC2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.0.0-RC2/manifests"},{"name":"jackson-databind-2.0.0-RC1","sha":"9af5904b805fa07a00757fe2d24c1f931b502254","kind":"tag","published_at":"2012-02-19T08:03:58.000Z","download_url":"https://codeload.github.com/FasterXML/jackson-databind/tar.gz/jackson-databind-2.0.0-RC1","html_url":"https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.0.0-RC1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/FasterXML/jackson-databind@jackson-databind-2.0.0-RC1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.0.0-RC1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/tags/jackson-databind-2.0.0-RC1/manifests"}]},"repo_metadata_updated_at":"2026-02-11T14:18:23.148Z","dependent_packages_count":23566,"downloads":null,"downloads_period":null,"dependent_repos_count":244221,"rankings":{"downloads":null,"dependent_repos_count":0.0024044241404183697,"dependent_packages_count":0.0012022120702091848,"stargazers_count":5.802877294221368,"forks_count":4.350805482087041,"docker_downloads_count":0.00080147471347279,"average":2.031618177446502},"purl":"pkg:maven/com.fasterxml.jackson.core/jackson-databind","advisories":[{"uuid":"GSA_kwCzR0hTQS0zeDh4LTc5bTItM3cyd84AAyLf","url":"https://github.com/advisories/GHSA-3x8x-79m2-3w2w","title":"jackson-databind possible Denial of Service if using JDK serialization to serialize JsonNode","description":"jackson-databind 2.10.x through 2.12.x before 2.12.6 and 2.13.x before 2.13.1 allows attackers to cause a denial of service (2 GB transient heap usage per read) in uncommon situations involving JsonNode JDK serialization.","origin":"UNSPECIFIED","severity":"HIGH","published_at":"2023-03-19T00:30:25.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":7.5,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","references":["https://nvd.nist.gov/vuln/detail/CVE-2021-46877","https://github.com/FasterXML/jackson-databind/issues/3328","https://groups.google.com/g/jackson-user/c/OsBsirPM_Vw","https://github.com/FasterXML/jackson-databind/commit/3ccde7d938fea547e598fdefe9a82cff37fed5cb","https://github.com/FasterXML/jackson/wiki/Jackson-Release-2.12.6","https://github.com/FasterXML/jackson/wiki/Jackson-Release-2.13.1","https://github.com/advisories/GHSA-3x8x-79m2-3w2w"],"source_kind":"github","identifiers":["GHSA-3x8x-79m2-3w2w","CVE-2021-46877"],"repository_url":"https://github.com/FasterXML/jackson-databind","blast_radius":0.0,"created_at":"2023-03-20T22:03:07.536Z","updated_at":"2026-06-20T04:08:56.902Z","epss_percentage":0.01124,"epss_percentile":0.62025,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS0zeDh4LTc5bTItM3cyd84AAyLf","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS0zeDh4LTc5bTItM3cyd84AAyLf","packages":[{"ecosystem":"maven","package_name":"com.fasterxml.jackson.core:jackson-databind","versions":[{"first_patched_version":"2.13.1","vulnerable_version_range":"\u003e= 2.13.0, \u003c 2.13.1"},{"first_patched_version":"2.12.6","vulnerable_version_range":"\u003e= 2.10.0, \u003c 2.12.6"}],"purl":null}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS0zeDh4LTc5bTItM3cyd84AAyLf/related_packages","related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS1qampoLWpqeHAtd3BmZs4AAvJv","url":"https://github.com/advisories/GHSA-jjjh-jjxp-wpff","title":"Uncontrolled Resource Consumption in Jackson-databind","description":"In FasterXML jackson-databind 2.4.0-rc1 until 2.12.7.1 and in 2.13.x before 2.13.4.2 resource exhaustion can occur because of a lack of a check in primitive value deserializers to avoid deep wrapper array nesting, when the UNWRAP_SINGLE_VALUE_ARRAYS feature is enabled. This was patched in 2.12.7.1, 2.13.4.2, and 2.14.0.\n\nCommits that introduced vulnerable code are \nhttps://github.com/FasterXML/jackson-databind/commit/d499f2e7bbc5ebd63af11e1f5cf1989fa323aa45, https://github.com/FasterXML/jackson-databind/commit/0e37a39502439ecbaa1a5b5188387c01bf7f7fa1, and https://github.com/FasterXML/jackson-databind/commit/7ba9ac5b87a9d6ac0d2815158ecbeb315ad4dcdc.\n\nFix commits are https://github.com/FasterXML/jackson-databind/commit/cd090979b7ea78c75e4de8a4aed04f7e9fa8deea and https://github.com/FasterXML/jackson-databind/commit/d78d00ee7b5245b93103fef3187f70543d67ca33.\n\nThe `2.13.4.1` release does fix this issue, however it also references a non-existent jackson-bom which causes build failures for gradle users. See https://github.com/FasterXML/jackson-databind/issues/3627#issuecomment-1277957548 for details. This is fixed in `2.13.4.2` which is listed in the advisory metadata so that users are not subjected to unnecessary build failures","origin":"UNSPECIFIED","severity":"HIGH","published_at":"2022-10-03T00:00:31.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":7.5,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","references":["https://nvd.nist.gov/vuln/detail/CVE-2022-42003","https://github.com/FasterXML/jackson-databind/issues/3590","https://github.com/FasterXML/jackson-databind/commit/d78d00ee7b5245b93103fef3187f70543d67ca33","https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51020","https://github.com/FasterXML/jackson-databind/blob/2.13/release-notes/VERSION-2.x","https://security.gentoo.org/glsa/202210-21","https://github.com/FasterXML/jackson-databind/issues/3627","https://github.com/FasterXML/jackson-databind/commit/cd090979b7ea78c75e4de8a4aed04f7e9fa8deea","https://www.debian.org/security/2022/dsa-5283","https://lists.debian.org/debian-lts-announce/2022/11/msg00035.html","https://github.com/FasterXML/jackson-databind/commit/7ba9ac5b87a9d6ac0d2815158ecbeb315ad4dcdc","https://github.com/FasterXML/jackson-databind/commit/0e37a39502439ecbaa1a5b5188387c01bf7f7fa1","https://github.com/FasterXML/jackson-databind/commit/d499f2e7bbc5ebd63af11e1f5cf1989fa323aa45","https://github.com/FasterXML/jackson-databind/commits/jackson-databind-2.4.0-rc1?after=75b97b8519f0d50c62523ad85170d80a197a2c86+174\u0026branch=jackson-databind-2.4.0-rc1\u0026qualified_name=refs%2Ftags%2Fjackson-databind-2.4.0-rc1","https://github.com/FasterXML/jackson-databind/compare/jackson-databind-2.13.4.1...jackson-databind-2.13.4.2","https://github.com/FasterXML/jackson-databind/commit/2c4a601c626f7790cad9d3c322d244e182838288","https://security.netapp.com/advisory/ntap-20221124-0004","https://github.com/advisories/GHSA-jjjh-jjxp-wpff"],"source_kind":"github","identifiers":["GHSA-jjjh-jjxp-wpff","CVE-2022-42003"],"repository_url":"https://github.com/FasterXML/jackson-databind","blast_radius":0.0,"created_at":"2022-12-21T16:11:51.356Z","updated_at":"2026-06-20T04:06:15.706Z","epss_percentage":0.02824,"epss_percentile":0.84749,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1qampoLWpqeHAtd3BmZs4AAvJv","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS1qampoLWpqeHAtd3BmZs4AAvJv","packages":[{"ecosystem":"maven","package_name":"com.fasterxml.jackson.core:jackson-databind","versions":[{"first_patched_version":"2.13.4.2","vulnerable_version_range":"\u003e= 2.13.0, \u003c 2.13.4.2"},{"first_patched_version":"2.12.7.1","vulnerable_version_range":"\u003e= 2.4.0-rc1, \u003c 2.12.7.1"}],"purl":null}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1qampoLWpqeHAtd3BmZs4AAvJv/related_packages","related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS1yZ3Y5LXE1NDMtcnFnNM4AAvJu","url":"https://github.com/advisories/GHSA-rgv9-q543-rqg4","title":"Uncontrolled Resource Consumption in FasterXML jackson-databind","description":"In FasterXML jackson-databind before 2.12.7.1 and in 2.13.x before 2.13.4, resource exhaustion can occur because of a lack of a check in BeanDeserializer._deserializeFromArray to prevent use of deeply nested arrays. This issue can only happen when the `UNWRAP_SINGLE_VALUE_ARRAYS` feature is explicitly enabled.","origin":"UNSPECIFIED","severity":"HIGH","published_at":"2022-10-03T00:00:31.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":8.2,"cvss_vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N","references":["https://nvd.nist.gov/vuln/detail/CVE-2022-42004","https://github.com/FasterXML/jackson-databind/issues/3582","https://github.com/FasterXML/jackson-databind/commit/063183589218fec19a9293ed2f17ec53ea80ba88","https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50490","https://security.gentoo.org/glsa/202210-21","https://www.debian.org/security/2022/dsa-5283","https://lists.debian.org/debian-lts-announce/2022/11/msg00035.html","https://github.com/FasterXML/jackson-databind/commit/35de19e7144c4df8ab178b800ba86e80c3d84252","https://github.com/FasterXML/jackson-databind/commit/cd090979b7ea78c75e4de8a4aed04f7e9fa8deea","https://security.netapp.com/advisory/ntap-20221118-0008","https://github.com/FasterXML/jackson-databind/commit/0e37a39502439ecbaa1a5b5188387c01bf7f7fa1","https://github.com/advisories/GHSA-rgv9-q543-rqg4"],"source_kind":"github","identifiers":["GHSA-rgv9-q543-rqg4","CVE-2022-42004"],"repository_url":"https://github.com/FasterXML/jackson-databind","blast_radius":44.17982064259438,"created_at":"2022-12-21T16:11:50.357Z","updated_at":"2026-06-20T05:06:18.012Z","epss_percentage":0.02656,"epss_percentile":0.837,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1yZ3Y5LXE1NDMtcnFnNM4AAvJu","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS1yZ3Y5LXE1NDMtcnFnNM4AAvJu","packages":[{"ecosystem":"maven","package_name":"com.fasterxml.jackson.core:jackson-databind","versions":[{"first_patched_version":"2.13.4","vulnerable_version_range":"\u003e= 2.13.0, \u003c 2.13.4"}],"purl":null}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1yZ3Y5LXE1NDMtcnFnNM4AAvJu/related_packages","related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS1ycHIzLWN3MzktM3B4aM4AAtZ7","url":"https://github.com/advisories/GHSA-rpr3-cw39-3pxh","title":"jackson-databind vulnerable to unsafe deserialization","description":"The com.fasterxml.jackson.core:jackson-databind library before version 2.9.10.4 is vulnerable to an Unsafe Deserialization vulnerability when handling interactions related to the class `ignite-jta`.","origin":"UNSPECIFIED","severity":"HIGH","published_at":"2022-07-15T19:41:47.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":8.1,"cvss_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","references":["https://nvd.nist.gov/vuln/detail/CVE-2020-10650","https://github.com/FasterXML/jackson-databind/issues/2658","https://github.com/luisgarciacheckmarx/LGV_onefile/issues/19","https://github.com/FasterXML/jackson-databind/pull/2864","https://github.com/FasterXML/jackson-databind/commit/a424c038ba0c0d65e579e22001dec925902ac0ef","https://www.oracle.com/security-alerts/cpujan2021.html","https://medium.com/@cowtowncoder/on-jackson-cves-dont-panic-here-is-what-you-need-to-know-54cd0d6e8062","https://www.oracle.com/security-alerts/cpuoct2022.html","https://lists.debian.org/debian-lts-announce/2023/04/msg00032.html","https://security.netapp.com/advisory/ntap-20230818-0007","https://github.com/advisories/GHSA-rpr3-cw39-3pxh"],"source_kind":"github","identifiers":["GHSA-rpr3-cw39-3pxh","CVE-2020-10650"],"repository_url":"https://github.com/FasterXML/jackson-databind","blast_radius":0.0,"created_at":"2022-12-21T16:12:10.583Z","updated_at":"2026-06-20T04:08:21.168Z","epss_percentage":0.03301,"epss_percentile":0.86931,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1ycHIzLWN3MzktM3B4aM4AAtZ7","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS1ycHIzLWN3MzktM3B4aM4AAtZ7","packages":[{"ecosystem":"maven","package_name":"com.fasterxml.jackson.core:jackson-databind","versions":[{"first_patched_version":"2.9.10.4","vulnerable_version_range":"\u003c= 2.9.10.3"}],"purl":null}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1ycHIzLWN3MzktM3B4aM4AAtZ7/related_packages","related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS01N2oyLXc0Y3gtNjJoMs0ybA","url":"https://github.com/advisories/GHSA-57j2-w4cx-62h2","title":"Deeply nested json in jackson-databind","description":"jackson-databind is a data-binding package for the Jackson Data Processor. jackson-databind allows a Java stack overflow exception and denial of service via a large depth of nested objects.","origin":"UNSPECIFIED","severity":"HIGH","published_at":"2022-03-12T00:00:36.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":7.5,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","references":["https://nvd.nist.gov/vuln/detail/CVE-2020-36518","https://github.com/FasterXML/jackson-databind/issues/2816","https://github.com/FasterXML/jackson-databind/commit/fcfc4998ec23f0b1f7f8a9521c2b317b6c25892b","https://github.com/FasterXML/jackson/wiki/Jackson-Release-2.12","https://github.com/FasterXML/jackson/wiki/Jackson-Release-2.13","https://lists.debian.org/debian-lts-announce/2022/05/msg00001.html","https://www.oracle.com/security-alerts/cpuapr2022.html","https://www.oracle.com/security-alerts/cpujul2022.html","https://lists.debian.org/debian-lts-announce/2022/11/msg00035.html","https://www.debian.org/security/2022/dsa-5283","https://github.com/FasterXML/jackson-databind/commit/0a8157c6ca478b1bc7be4ba7dccdb3863275f0de","https://github.com/FasterXML/jackson-databind/commit/3cc52f82ecf943e06c1d7c3b078e405fb3923d2b","https://github.com/FasterXML/jackson-databind/commit/8238ab41d0350fb915797c89d46777b4496b74fd","https://github.com/FasterXML/jackson-databind/commit/b3587924ee5d8695942f364d0d404d48d0ea6126","https://security.netapp.com/advisory/ntap-20220506-0004","https://github.com/advisories/GHSA-57j2-w4cx-62h2"],"source_kind":"github","identifiers":["GHSA-57j2-w4cx-62h2","CVE-2020-36518"],"repository_url":"https://github.com/FasterXML/jackson-databind","blast_radius":0.0,"created_at":"2022-12-21T16:12:31.754Z","updated_at":"2026-06-20T04:06:15.706Z","epss_percentage":0.0486,"epss_percentile":0.90905,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS01N2oyLXc0Y3gtNjJoMs0ybA","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS01N2oyLXc0Y3gtNjJoMs0ybA","packages":[{"ecosystem":"maven","package_name":"com.fasterxml.jackson.core:jackson-databind","versions":[{"first_patched_version":"2.12.6.1","vulnerable_version_range":"\u003c= 2.12.6.0"},{"first_patched_version":"2.13.2.1","vulnerable_version_range":"\u003e= 2.13.0, \u003c= 2.13.2.0"}],"purl":null}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS01N2oyLXc0Y3gtNjJoMs0ybA/related_packages","related_advisories":[]},{"uuid":"MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXZmcXgtMzNxbS1nODY5","url":"https://github.com/advisories/GHSA-vfqx-33qm-g869","title":"Unsafe Deserialization in jackson-databind","description":"FasterXML jackson-databind 2.x before 2.9.10.8 an 2.6.7.5 mishandles the interaction between serialization gadgets and typing, related to com.newrelic.agent.deps.ch.qos.logback.core.db.DriverManagerConnectionSource.","origin":"UNSPECIFIED","severity":"HIGH","published_at":"2021-12-09T19:16:59.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":8.1,"cvss_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","references":["https://nvd.nist.gov/vuln/detail/CVE-2020-36189","https://github.com/FasterXML/jackson-databind/issues/2996","https://cowtowncoder.medium.com/on-jackson-cves-dont-panic-here-is-what-you-need-to-know-54cd0d6e8062","https://security.netapp.com/advisory/ntap-20210205-0005/","https://lists.debian.org/debian-lts-announce/2021/04/msg00025.html","https://www.oracle.com/security-alerts/cpuApr2021.html","https://www.oracle.com//security-alerts/cpujul2021.html","https://www.oracle.com/security-alerts/cpuoct2021.html","https://www.oracle.com/security-alerts/cpujan2022.html","https://www.oracle.com/security-alerts/cpuapr2022.html","https://www.oracle.com/security-alerts/cpujul2022.html","https://github.com/FasterXML/jackson-databind/commit/33d96c13fe18a2dad01b19ce195548c9acea9da4","https://github.com/advisories/GHSA-vfqx-33qm-g869"],"source_kind":"github","identifiers":["GHSA-vfqx-33qm-g869","CVE-2020-36189"],"repository_url":"https://github.com/FasterXML/jackson-databind","blast_radius":0.0,"created_at":"2022-12-21T16:13:10.488Z","updated_at":"2026-06-20T04:07:55.686Z","epss_percentage":0.04912,"epss_percentile":0.90986,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXZmcXgtMzNxbS1nODY5","html_url":"https://advisories.ecosyste.ms/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXZmcXgtMzNxbS1nODY5","packages":[{"ecosystem":"maven","package_name":"com.fasterxml.jackson.core:jackson-databind","versions":[{"first_patched_version":"2.6.7.5","vulnerable_version_range":"\u003c 2.6.7.5"},{"first_patched_version":"2.9.10.8","vulnerable_version_range":"\u003e= 2.7.0, \u003c 2.9.10.8"}],"purl":null}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXZmcXgtMzNxbS1nODY5/related_packages","related_advisories":[]},{"uuid":"MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXI2OTUtN3ZyOS1qZ2My","url":"https://github.com/advisories/GHSA-r695-7vr9-jgc2","title":"Unsafe Deserialization in jackson-databind","description":"FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp.datasources.SharedPoolDataSource.","origin":"UNSPECIFIED","severity":"HIGH","published_at":"2021-12-09T19:16:51.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":8.1,"cvss_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","references":["https://nvd.nist.gov/vuln/detail/CVE-2020-36187","https://github.com/FasterXML/jackson-databind/issues/2997","https://cowtowncoder.medium.com/on-jackson-cves-dont-panic-here-is-what-you-need-to-know-54cd0d6e8062","https://security.netapp.com/advisory/ntap-20210205-0005/","https://lists.debian.org/debian-lts-announce/2021/04/msg00025.html","https://www.oracle.com/security-alerts/cpuApr2021.html","https://www.oracle.com//security-alerts/cpujul2021.html","https://www.oracle.com/security-alerts/cpuoct2021.html","https://www.oracle.com/security-alerts/cpujan2022.html","https://www.oracle.com/security-alerts/cpuapr2022.html","https://www.oracle.com/security-alerts/cpujul2022.html","https://github.com/FasterXML/jackson-databind/commit/3e8fa3beea49ea62109df9e643c9cb678dabdde1","https://github.com/advisories/GHSA-r695-7vr9-jgc2"],"source_kind":"github","identifiers":["GHSA-r695-7vr9-jgc2","CVE-2020-36187"],"repository_url":"https://github.com/FasterXML/jackson-databind","blast_radius":0.0,"created_at":"2022-12-21T16:13:10.478Z","updated_at":"2026-06-20T04:07:55.687Z","epss_percentage":0.05195,"epss_percentile":0.91402,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXI2OTUtN3ZyOS1qZ2My","html_url":"https://advisories.ecosyste.ms/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXI2OTUtN3ZyOS1qZ2My","packages":[{"ecosystem":"maven","package_name":"com.fasterxml.jackson.core:jackson-databind","versions":[{"first_patched_version":"2.9.10.8","vulnerable_version_range":"\u003e= 2.0.0, \u003c 2.9.10.8"}],"purl":null}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXI2OTUtN3ZyOS1qZ2My/related_packages","related_advisories":[]},{"uuid":"MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWY5eGgtMnFncC1jcTU3","url":"https://github.com/advisories/GHSA-f9xh-2qgp-cq57","title":"Unsafe Deserialization in jackson-databind","description":"FasterXML jackson-databind 2.x before 2.9.10.8 and 2.6.7.5 mishandles the interaction between serialization gadgets and typing, related to `com.newrelic.agent.deps.ch.qos.logback.core.db.JNDIConnectionSource`.","origin":"UNSPECIFIED","severity":"HIGH","published_at":"2021-12-09T19:16:42.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":8.1,"cvss_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","references":["https://nvd.nist.gov/vuln/detail/CVE-2020-36188","https://github.com/FasterXML/jackson-databind/issues/2996","https://cowtowncoder.medium.com/on-jackson-cves-dont-panic-here-is-what-you-need-to-know-54cd0d6e8062","https://security.netapp.com/advisory/ntap-20210205-0005/","https://lists.debian.org/debian-lts-announce/2021/04/msg00025.html","https://www.oracle.com/security-alerts/cpuApr2021.html","https://www.oracle.com//security-alerts/cpujul2021.html","https://www.oracle.com/security-alerts/cpuoct2021.html","https://www.oracle.com/security-alerts/cpujan2022.html","https://www.oracle.com/security-alerts/cpuapr2022.html","https://www.oracle.com/security-alerts/cpujul2022.html","https://github.com/FasterXML/jackson-databind/commit/33d96c13fe18a2dad01b19ce195548c9acea9da4","https://github.com/advisories/GHSA-f9xh-2qgp-cq57"],"source_kind":"github","identifiers":["GHSA-f9xh-2qgp-cq57","CVE-2020-36188"],"repository_url":"https://github.com/FasterXML/jackson-databind","blast_radius":0.0,"created_at":"2022-12-21T16:13:10.469Z","updated_at":"2026-06-20T04:07:55.687Z","epss_percentage":0.10911,"epss_percentile":0.95313,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWY5eGgtMnFncC1jcTU3","html_url":"https://advisories.ecosyste.ms/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWY5eGgtMnFncC1jcTU3","packages":[{"ecosystem":"maven","package_name":"com.fasterxml.jackson.core:jackson-databind","versions":[{"first_patched_version":"2.6.7.5","vulnerable_version_range":"\u003e= 2.0.0, \u003c 2.6.7.5"},{"first_patched_version":"2.9.10.8","vulnerable_version_range":"\u003e= 2.7.0, \u003c 2.9.10.8"}],"purl":null}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWY5eGgtMnFncC1jcTU3/related_packages","related_advisories":[]},{"uuid":"MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTltNmYtN3hjcS04dmY4","url":"https://github.com/advisories/GHSA-9m6f-7xcq-8vf8","title":"Unsafe Deserialization in jackson-databind","description":"FasterXML jackson-databind 2.x before 2.9.10.8 and 2.6.7.5 mishandles the interaction between serialization gadgets and typing, related to org.docx4j.org.apache.xalan.lib.sql.JNDIConnectionPool.","origin":"UNSPECIFIED","severity":"HIGH","published_at":"2021-12-09T19:16:34.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":8.1,"cvss_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","references":["https://nvd.nist.gov/vuln/detail/CVE-2020-36183","https://github.com/FasterXML/jackson-databind/issues/3003","https://cowtowncoder.medium.com/on-jackson-cves-dont-panic-here-is-what-you-need-to-know-54cd0d6e8062","https://lists.debian.org/debian-lts-announce/2021/04/msg00025.html","https://www.oracle.com/security-alerts/cpuApr2021.html","https://www.oracle.com//security-alerts/cpujul2021.html","https://www.oracle.com/security-alerts/cpuoct2021.html","https://www.oracle.com/security-alerts/cpujan2022.html","https://www.oracle.com/security-alerts/cpuapr2022.html","https://www.oracle.com/security-alerts/cpujul2022.html","https://github.com/FasterXML/jackson-databind/commit/12e23c962ffb4cf1857c5461d72ae54cc8008f29","https://security.netapp.com/advisory/ntap-20210205-0005","https://github.com/advisories/GHSA-9m6f-7xcq-8vf8"],"source_kind":"github","identifiers":["GHSA-9m6f-7xcq-8vf8","CVE-2020-36183"],"repository_url":"https://github.com/FasterXML/jackson-databind","blast_radius":0.0,"created_at":"2022-12-21T16:13:10.459Z","updated_at":"2026-06-20T04:07:55.685Z","epss_percentage":0.0489,"epss_percentile":0.90954,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTltNmYtN3hjcS04dmY4","html_url":"https://advisories.ecosyste.ms/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTltNmYtN3hjcS04dmY4","packages":[{"ecosystem":"maven","package_name":"com.fasterxml.jackson.core:jackson-databind","versions":[{"first_patched_version":"2.6.7.5","vulnerable_version_range":"\u003e= 2.0.0, \u003c 2.6.7.5"},{"first_patched_version":"2.9.10.8","vulnerable_version_range":"\u003e= 2.7.00, \u003c 2.9.10.8"}],"purl":null}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTltNmYtN3hjcS04dmY4/related_packages","related_advisories":[]},{"uuid":"MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLW02eDQtOTd3eC00cTI3","url":"https://github.com/advisories/GHSA-m6x4-97wx-4q27","title":"Unsafe Deserialization in jackson-databind","description":"FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp2.datasources.PerUserPoolDataSource.","origin":"UNSPECIFIED","severity":"HIGH","published_at":"2021-12-09T19:16:26.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":8.1,"cvss_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","references":["https://nvd.nist.gov/vuln/detail/CVE-2020-36184","https://github.com/FasterXML/jackson-databind/issues/2998","https://cowtowncoder.medium.com/on-jackson-cves-dont-panic-here-is-what-you-need-to-know-54cd0d6e8062","https://security.netapp.com/advisory/ntap-20210205-0005/","https://lists.debian.org/debian-lts-announce/2021/04/msg00025.html","https://www.oracle.com/security-alerts/cpuApr2021.html","https://www.oracle.com//security-alerts/cpujul2021.html","https://www.oracle.com/security-alerts/cpuoct2021.html","https://www.oracle.com/security-alerts/cpujan2022.html","https://www.oracle.com/security-alerts/cpuapr2022.html","https://www.oracle.com/security-alerts/cpujul2022.html","https://github.com/FasterXML/jackson-databind/commit/567194c53ae91f0a14dc27239afb739b1c10448a","https://github.com/advisories/GHSA-m6x4-97wx-4q27"],"source_kind":"github","identifiers":["GHSA-m6x4-97wx-4q27","CVE-2020-36184"],"repository_url":"https://github.com/FasterXML/jackson-databind","blast_radius":0.0,"created_at":"2022-12-21T16:13:10.450Z","updated_at":"2026-06-20T04:07:55.688Z","epss_percentage":0.10379,"epss_percentile":0.95137,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLW02eDQtOTd3eC00cTI3","html_url":"https://advisories.ecosyste.ms/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLW02eDQtOTd3eC00cTI3","packages":[{"ecosystem":"maven","package_name":"com.fasterxml.jackson.core:jackson-databind","versions":[{"first_patched_version":"2.9.10.8","vulnerable_version_range":"\u003e= 2.0.0, \u003c 2.9.10.8"}],"purl":null}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLW02eDQtOTd3eC00cTI3/related_packages","related_advisories":[]},{"uuid":"MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLThjNGotMzRyNC14cjhn","url":"https://github.com/advisories/GHSA-8c4j-34r4-xr8g","title":"Unsafe Deserialization in jackson-databind","description":"FasterXML jackson-databind 2.x before 2.9.10.8 and 2.6.7.5 mishandles the interaction between serialization gadgets and typing, related to org.apache.commons.dbcp2.cpdsadapter.DriverAdapterCPDS.","origin":"UNSPECIFIED","severity":"HIGH","published_at":"2021-12-09T19:16:18.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":8.1,"cvss_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","references":["https://nvd.nist.gov/vuln/detail/CVE-2020-36180","https://github.com/FasterXML/jackson-databind/issues/3004","https://cowtowncoder.medium.com/on-jackson-cves-dont-panic-here-is-what-you-need-to-know-54cd0d6e8062","https://security.netapp.com/advisory/ntap-20210205-0005/","https://lists.debian.org/debian-lts-announce/2021/04/msg00025.html","https://www.oracle.com/security-alerts/cpuApr2021.html","https://www.oracle.com//security-alerts/cpujul2021.html","https://www.oracle.com/security-alerts/cpuoct2021.html","https://www.oracle.com/security-alerts/cpujan2022.html","https://www.oracle.com/security-alerts/cpuapr2022.html","https://www.oracle.com/security-alerts/cpujul2022.html","https://github.com/FasterXML/jackson-databind/commit/3ded28aece694d0df39c9f0fa1ff385b14a8656b","https://github.com/advisories/GHSA-8c4j-34r4-xr8g"],"source_kind":"github","identifiers":["GHSA-8c4j-34r4-xr8g","CVE-2020-36180"],"repository_url":"https://github.com/FasterXML/jackson-databind","blast_radius":0.0,"created_at":"2022-12-21T16:13:10.441Z","updated_at":"2026-06-20T04:07:55.685Z","epss_percentage":0.05041,"epss_percentile":0.91186,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLThjNGotMzRyNC14cjhn","html_url":"https://advisories.ecosyste.ms/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLThjNGotMzRyNC14cjhn","packages":[{"ecosystem":"maven","package_name":"com.fasterxml.jackson.core:jackson-databind","versions":[{"first_patched_version":"2.6.7.5","vulnerable_version_range":"\u003e= 2.0.0, \u003c 2.6.7.5"},{"first_patched_version":"2.9.10.8","vulnerable_version_range":"\u003e= 2.7.0, \u003c 2.9.10.8"}],"purl":null}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLThjNGotMzRyNC14cjhn/related_packages","related_advisories":[]},{"uuid":"MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWN2bTktZmptOS0zNTcy","url":"https://github.com/advisories/GHSA-cvm9-fjm9-3572","title":"Unsafe Deserialization in jackson-databind","description":"FasterXML jackson-databind 2.x before 2.9.10.8 and 2.6.7.5 mishandles the interaction between serialization gadgets and typing, related to `org.apache.tomcat.dbcp.dbcp.cpdsadapter.DriverAdapterCPDS`.","origin":"UNSPECIFIED","severity":"HIGH","published_at":"2021-12-09T19:16:10.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":8.1,"cvss_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","references":["https://nvd.nist.gov/vuln/detail/CVE-2020-36181","https://github.com/FasterXML/jackson-databind/issues/3004","https://cowtowncoder.medium.com/on-jackson-cves-dont-panic-here-is-what-you-need-to-know-54cd0d6e8062","https://security.netapp.com/advisory/ntap-20210205-0005/","https://lists.debian.org/debian-lts-announce/2021/04/msg00025.html","https://www.oracle.com/security-alerts/cpuApr2021.html","https://www.oracle.com//security-alerts/cpujul2021.html","https://www.oracle.com/security-alerts/cpuoct2021.html","https://www.oracle.com/security-alerts/cpujan2022.html","https://www.oracle.com/security-alerts/cpuapr2022.html","https://www.oracle.com/security-alerts/cpujul2022.html","https://github.com/FasterXML/jackson-databind/commit/3ded28aece694d0df39c9f0fa1ff385b14a8656b","https://github.com/advisories/GHSA-cvm9-fjm9-3572"],"source_kind":"github","identifiers":["GHSA-cvm9-fjm9-3572","CVE-2020-36181"],"repository_url":"https://github.com/FasterXML/jackson-databind","blast_radius":0.0,"created_at":"2022-12-21T16:13:10.432Z","updated_at":"2026-06-20T04:07:55.686Z","epss_percentage":0.05018,"epss_percentile":0.91145,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWN2bTktZmptOS0zNTcy","html_url":"https://advisories.ecosyste.ms/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWN2bTktZmptOS0zNTcy","packages":[{"ecosystem":"maven","package_name":"com.fasterxml.jackson.core:jackson-databind","versions":[{"first_patched_version":"2.6.7.5","vulnerable_version_range":"\u003e= 2.0.0, \u003c 2.6.7.5"},{"first_patched_version":"2.9.10.8","vulnerable_version_range":"\u003e= 2.7.0, \u003c 2.9.10.8"}],"purl":null}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWN2bTktZmptOS0zNTcy/related_packages","related_advisories":[]},{"uuid":"MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTh3MjYtNmYyNS1jbTl4","url":"https://github.com/advisories/GHSA-8w26-6f25-cm9x","title":"Unsafe Deserialization in jackson-databind","description":"FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to `org.apache.tomcat.dbcp.dbcp2.datasources.SharedPoolDataSource`.","origin":"UNSPECIFIED","severity":"HIGH","published_at":"2021-12-09T19:16:02.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":8.1,"cvss_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","references":["https://nvd.nist.gov/vuln/detail/CVE-2020-36185","https://github.com/FasterXML/jackson-databind/issues/2998","https://cowtowncoder.medium.com/on-jackson-cves-dont-panic-here-is-what-you-need-to-know-54cd0d6e8062","https://security.netapp.com/advisory/ntap-20210205-0005/","https://lists.debian.org/debian-lts-announce/2021/04/msg00025.html","https://www.oracle.com/security-alerts/cpuApr2021.html","https://www.oracle.com//security-alerts/cpujul2021.html","https://www.oracle.com/security-alerts/cpuoct2021.html","https://www.oracle.com/security-alerts/cpujan2022.html","https://www.oracle.com/security-alerts/cpuapr2022.html","https://www.oracle.com/security-alerts/cpujul2022.html","https://github.com/FasterXML/jackson-databind/commit/567194c53ae91f0a14dc27239afb739b1c10448a","https://github.com/advisories/GHSA-8w26-6f25-cm9x"],"source_kind":"github","identifiers":["GHSA-8w26-6f25-cm9x","CVE-2020-36185"],"repository_url":"https://github.com/FasterXML/jackson-databind","blast_radius":0.0,"created_at":"2022-12-21T16:13:10.423Z","updated_at":"2026-06-20T04:07:55.688Z","epss_percentage":0.05218,"epss_percentile":0.91434,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTh3MjYtNmYyNS1jbTl4","html_url":"https://advisories.ecosyste.ms/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTh3MjYtNmYyNS1jbTl4","packages":[{"ecosystem":"maven","package_name":"com.fasterxml.jackson.core:jackson-databind","versions":[{"first_patched_version":"2.9.10.8","vulnerable_version_range":"\u003e= 2.0.0, \u003c 2.9.10.8"}],"purl":null}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTh3MjYtNmYyNS1jbTl4/related_packages","related_advisories":[]},{"uuid":"MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTlncGgtMjJ4aC04eDk4","url":"https://github.com/advisories/GHSA-9gph-22xh-8x98","title":"Unsafe Deserialization in jackson-databind","description":"FasterXML jackson-databind 2.x before 2.9.10.8 and 2.6.7.5 mishandles the interaction between serialization gadgets and typing, related to `oadd.org.apache.commons.dbcp.cpdsadapter.DriverAdapterCPDS`.","origin":"UNSPECIFIED","severity":"HIGH","published_at":"2021-12-09T19:15:54.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":8.1,"cvss_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","references":["https://nvd.nist.gov/vuln/detail/CVE-2020-36179","https://github.com/FasterXML/jackson-databind/issues/3004","https://cowtowncoder.medium.com/on-jackson-cves-dont-panic-here-is-what-you-need-to-know-54cd0d6e8062","https://lists.apache.org/thread.html/rc255f41d9a61d3dc79a51fb5c713de4ae10e71e3673feeb0b180b436@%3Cissues.spark.apache.org%3E","https://security.netapp.com/advisory/ntap-20210205-0005/","https://lists.debian.org/debian-lts-announce/2021/04/msg00025.html","https://www.oracle.com/security-alerts/cpuApr2021.html","https://www.oracle.com//security-alerts/cpujul2021.html","https://www.oracle.com/security-alerts/cpuoct2021.html","https://www.oracle.com/security-alerts/cpujan2022.html","https://www.oracle.com/security-alerts/cpuapr2022.html","https://www.oracle.com/security-alerts/cpujul2022.html","https://github.com/FasterXML/jackson-databind/commit/3ded28aece694d0df39c9f0fa1ff385b14a8656b","https://github.com/advisories/GHSA-9gph-22xh-8x98"],"source_kind":"github","identifiers":["GHSA-9gph-22xh-8x98","CVE-2020-36179"],"repository_url":"https://github.com/FasterXML/jackson-databind","blast_radius":0.0,"created_at":"2022-12-21T16:13:10.414Z","updated_at":"2026-06-20T04:07:55.686Z","epss_percentage":0.20929,"epss_percentile":0.97241,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTlncGgtMjJ4aC04eDk4","html_url":"https://advisories.ecosyste.ms/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTlncGgtMjJ4aC04eDk4","packages":[{"ecosystem":"maven","package_name":"com.fasterxml.jackson.core:jackson-databind","versions":[{"first_patched_version":"2.6.7.5","vulnerable_version_range":"\u003e= 2.0.0, \u003c 2.6.7.5"},{"first_patched_version":"2.9.10.8","vulnerable_version_range":"\u003e= 2.7.0, \u003c 2.9.10.8"}],"purl":null}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTlncGgtMjJ4aC04eDk4/related_packages","related_advisories":[]},{"uuid":"MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTg5cXItMzY5Zi01bTV4","url":"https://github.com/advisories/GHSA-89qr-369f-5m5x","title":"Unsafe Deserialization in jackson-databind","description":"FasterXML jackson-databind 2.x before 2.9.10.8 and 2.6.7.5 mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp2.cpdsadapter.DriverAdapterCPDS.","origin":"UNSPECIFIED","severity":"HIGH","published_at":"2021-12-09T19:15:46.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":8.1,"cvss_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","references":["https://nvd.nist.gov/vuln/detail/CVE-2020-36182","https://github.com/FasterXML/jackson-databind/issues/3004","https://cowtowncoder.medium.com/on-jackson-cves-dont-panic-here-is-what-you-need-to-know-54cd0d6e8062","https://security.netapp.com/advisory/ntap-20210205-0005/","https://lists.debian.org/debian-lts-announce/2021/04/msg00025.html","https://www.oracle.com/security-alerts/cpuApr2021.html","https://www.oracle.com//security-alerts/cpujul2021.html","https://www.oracle.com/security-alerts/cpuoct2021.html","https://www.oracle.com/security-alerts/cpujan2022.html","https://www.oracle.com/security-alerts/cpuapr2022.html","https://www.oracle.com/security-alerts/cpujul2022.html","https://github.com/FasterXML/jackson-databind/commit/3ded28aece694d0df39c9f0fa1ff385b14a8656b","https://github.com/advisories/GHSA-89qr-369f-5m5x"],"source_kind":"github","identifiers":["GHSA-89qr-369f-5m5x","CVE-2020-36182"],"repository_url":"https://github.com/FasterXML/jackson-databind","blast_radius":0.0,"created_at":"2022-12-21T16:13:10.404Z","updated_at":"2026-06-20T04:07:55.685Z","epss_percentage":0.05041,"epss_percentile":0.91186,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTg5cXItMzY5Zi01bTV4","html_url":"https://advisories.ecosyste.ms/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTg5cXItMzY5Zi01bTV4","packages":[{"ecosystem":"maven","package_name":"com.fasterxml.jackson.core:jackson-databind","versions":[{"first_patched_version":"2.6.7.5","vulnerable_version_range":"\u003e= 2.0.0, \u003c 2.6.7.5"},{"first_patched_version":"2.9.10.8","vulnerable_version_range":"\u003e= 2.7.0, \u003c 2.9.10.8"}],"purl":null}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTg5cXItMzY5Zi01bTV4/related_packages","related_advisories":[]},{"uuid":"MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXFqdzItaHI5OC1xZ2Zo","url":"https://github.com/advisories/GHSA-qjw2-hr98-qgfh","title":"Unsafe Deserialization in jackson-databind","description":"FasterXML jackson-databind 2.x before 2.6.7.5 and from 2.7.x before 2.9.10.6 mishandles the interaction between serialization gadgets and typing, related to com.pastdev.httpcomponents.configuration.JndiConfiguration.","origin":"UNSPECIFIED","severity":"HIGH","published_at":"2021-12-09T19:15:36.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":8.1,"cvss_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","references":["https://nvd.nist.gov/vuln/detail/CVE-2020-24750","https://github.com/FasterXML/jackson-databind/issues/2798","https://github.com/FasterXML/jackson-databind/commit/ad5a630174f08d279504bc51ebba8772fd71b86b","https://security.netapp.com/advisory/ntap-20201009-0003/","https://www.oracle.com/security-alerts/cpujan2021.html","https://lists.debian.org/debian-lts-announce/2021/04/msg00025.html","https://www.oracle.com/security-alerts/cpuApr2021.html","https://www.oracle.com//security-alerts/cpujul2021.html","https://www.oracle.com/security-alerts/cpuoct2021.html","https://www.oracle.com/security-alerts/cpujan2022.html","https://github.com/FasterXML/jackson-databind/commit/2118e71325486c68f089a9761c9d8a11b4ddd1cb","https://www.oracle.com/security-alerts/cpuapr2022.html","https://github.com/FasterXML/jackson-databind/commit/6cc9f1a1af323cd156f5668a47e43bab324ae16f","https://github.com/advisories/GHSA-qjw2-hr98-qgfh"],"source_kind":"github","identifiers":["GHSA-qjw2-hr98-qgfh","CVE-2020-24750"],"repository_url":"https://github.com/FasterXML/jackson-databind","blast_radius":0.0,"created_at":"2022-12-21T16:12:30.537Z","updated_at":"2026-06-20T04:07:55.688Z","epss_percentage":0.07268,"epss_percentile":0.93554,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXFqdzItaHI5OC1xZ2Zo","html_url":"https://advisories.ecosyste.ms/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXFqdzItaHI5OC1xZ2Zo","packages":[{"ecosystem":"maven","package_name":"com.fasterxml.jackson.core:jackson-databind","versions":[{"first_patched_version":"2.9.10.6","vulnerable_version_range":"\u003e= 2.7.0, \u003c= 2.9.10.5"},{"first_patched_version":"2.6.7.5","vulnerable_version_range":"\u003e= 2.0, \u003c= 2.6.7.4"}],"purl":null}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXFqdzItaHI5OC1xZ2Zo/related_packages","related_advisories":[]},{"uuid":"MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTVyNXItNmhwai04Z2c5","url":"https://github.com/advisories/GHSA-5r5r-6hpj-8gg9","title":"Serialization gadget exploit in jackson-databind","description":"FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to com.oracle.wls.shaded.org.apache.xalan.lib.sql.JNDIConnectionPool (aka embedded Xalan in org.glassfish.web/javax.servlet.jsp.jstl).","origin":"UNSPECIFIED","severity":"HIGH","published_at":"2021-12-09T19:15:24.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":8.1,"cvss_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","references":["https://nvd.nist.gov/vuln/detail/CVE-2020-35728","https://github.com/FasterXML/jackson-databind/issues/2999","https://medium.com/@cowtowncoder/on-jackson-cves-dont-panic-here-is-what-you-need-to-know-54cd0d6e8062","https://security.netapp.com/advisory/ntap-20210129-0007/","https://lists.debian.org/debian-lts-announce/2021/04/msg00025.html","https://www.oracle.com/security-alerts/cpuApr2021.html","https://www.oracle.com//security-alerts/cpujul2021.html","https://www.oracle.com/security-alerts/cpuoct2021.html","https://www.oracle.com/security-alerts/cpujan2022.html","https://www.oracle.com/security-alerts/cpuapr2022.html","https://www.oracle.com/security-alerts/cpujul2022.html","https://github.com/FasterXML/jackson-databind/commit/1ca0388c2fb37ac6a06f1c188ae89c41e3e15e84","https://github.com/advisories/GHSA-5r5r-6hpj-8gg9"],"source_kind":"github","identifiers":["GHSA-5r5r-6hpj-8gg9","CVE-2020-35728"],"repository_url":"https://github.com/FasterXML/jackson-databind","blast_radius":0.0,"created_at":"2022-12-21T16:13:08.114Z","updated_at":"2026-06-20T04:07:18.354Z","epss_percentage":0.12504,"epss_percentile":0.95712,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTVyNXItNmhwai04Z2c5","html_url":"https://advisories.ecosyste.ms/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTVyNXItNmhwai04Z2c5","packages":[{"ecosystem":"maven","package_name":"com.fasterxml.jackson.core:jackson-databind","versions":[{"first_patched_version":"2.9.10.8","vulnerable_version_range":"\u003e= 2.0.0, \u003c= 2.9.10.7"}],"purl":null}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTVyNXItNmhwai04Z2c5/related_packages","related_advisories":[]},{"uuid":"MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXIzZ3ItY3hyZi1oZzI1","url":"https://github.com/advisories/GHSA-r3gr-cxrf-hg25","title":"Serialization gadgets exploit in jackson-databind","description":"FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to org.apache.commons.dbcp2.datasources.SharedPoolDataSource.","origin":"UNSPECIFIED","severity":"HIGH","published_at":"2021-12-09T19:15:11.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":8.1,"cvss_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","references":["https://nvd.nist.gov/vuln/detail/CVE-2020-35491","https://github.com/FasterXML/jackson-databind/issues/2986","https://cowtowncoder.medium.com/on-jackson-cves-dont-panic-here-is-what-you-need-to-know-54cd0d6e8062","https://lists.debian.org/debian-lts-announce/2021/04/msg00025.html","https://www.oracle.com/security-alerts/cpuApr2021.html","https://www.oracle.com//security-alerts/cpujul2021.html","https://www.oracle.com/security-alerts/cpuoct2021.html","https://www.oracle.com/security-alerts/cpujan2022.html","https://www.oracle.com/security-alerts/cpuapr2022.html","https://www.oracle.com/security-alerts/cpujul2022.html","https://github.com/FasterXML/jackson-databind/commit/41b8bdb5ccc1d8edb71acf1c8234da235a24249d","https://security.netapp.com/advisory/ntap-20210122-0005","https://github.com/advisories/GHSA-r3gr-cxrf-hg25"],"source_kind":"github","identifiers":["GHSA-r3gr-cxrf-hg25","CVE-2020-35491"],"repository_url":"https://github.com/FasterXML/jackson-databind","blast_radius":0.0,"created_at":"2022-12-21T16:13:07.957Z","updated_at":"2026-06-20T04:05:21.823Z","epss_percentage":0.09477,"epss_percentile":0.94806,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXIzZ3ItY3hyZi1oZzI1","html_url":"https://advisories.ecosyste.ms/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXIzZ3ItY3hyZi1oZzI1","packages":[{"ecosystem":"maven","package_name":"com.fasterxml.jackson.core:jackson-databind","versions":[{"first_patched_version":"2.9.10.8","vulnerable_version_range":"\u003e= 2.0.0, \u003c= 2.9.10.7"}],"purl":null}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXIzZ3ItY3hyZi1oZzI1/related_packages","related_advisories":[]},{"uuid":"MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXdoOGctM2oyYy1ycWo1","url":"https://github.com/advisories/GHSA-wh8g-3j2c-rqj5","title":"Serialization gadgets exploit in jackson-databind","description":"FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to org.apache.commons.dbcp2.datasources.PerUserPoolDataSource.","origin":"UNSPECIFIED","severity":"HIGH","published_at":"2021-12-09T19:15:00.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":8.1,"cvss_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","references":["https://nvd.nist.gov/vuln/detail/CVE-2020-35490","https://github.com/FasterXML/jackson-databind/issues/2986","https://cowtowncoder.medium.com/on-jackson-cves-dont-panic-here-is-what-you-need-to-know-54cd0d6e8062","https://lists.debian.org/debian-lts-announce/2021/04/msg00025.html","https://www.oracle.com/security-alerts/cpuApr2021.html","https://www.oracle.com//security-alerts/cpujul2021.html","https://www.oracle.com/security-alerts/cpuoct2021.html","https://www.oracle.com/security-alerts/cpujan2022.html","https://www.oracle.com/security-alerts/cpuapr2022.html","https://www.oracle.com/security-alerts/cpujul2022.html","https://github.com/FasterXML/jackson-databind/commit/41b8bdb5ccc1d8edb71acf1c8234da235a24249d","https://security.netapp.com/advisory/ntap-20210122-0005","https://github.com/advisories/GHSA-wh8g-3j2c-rqj5"],"source_kind":"github","identifiers":["GHSA-wh8g-3j2c-rqj5","CVE-2020-35490"],"repository_url":"https://github.com/FasterXML/jackson-databind","blast_radius":0.0,"created_at":"2022-12-21T16:13:07.948Z","updated_at":"2026-06-20T04:06:15.705Z","epss_percentage":0.07694,"epss_percentile":0.93827,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXdoOGctM2oyYy1ycWo1","html_url":"https://advisories.ecosyste.ms/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXdoOGctM2oyYy1ycWo1","packages":[{"ecosystem":"maven","package_name":"com.fasterxml.jackson.core:jackson-databind","versions":[{"first_patched_version":"2.9.10.8","vulnerable_version_range":"\u003e= 2.0.0, \u003c= 2.9.10.7"}],"purl":null}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXdoOGctM2oyYy1ycWo1/related_packages","related_advisories":[]},{"uuid":"MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWgzY3ctZzRtcS1jNXgy","url":"https://github.com/advisories/GHSA-h3cw-g4mq-c5x2","title":"Code Injection in jackson-databind","description":"This project contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor. FasterXML jackson-databind 2.x before 2.9.10.6 mishandles the interaction between serialization gadgets and typing, related to br.com.anteros.dbcp.AnterosDBCPDataSource (aka Anteros-DBCP).","origin":"UNSPECIFIED","severity":"HIGH","published_at":"2021-12-09T19:14:51.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":8.1,"cvss_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","references":["https://nvd.nist.gov/vuln/detail/CVE-2020-24616","https://github.com/FasterXML/jackson-databind/issues/2814","https://lists.debian.org/debian-lts-announce/2021/04/msg00025.html","https://medium.com/@cowtowncoder/on-jackson-cves-dont-panic-here-is-what-you-need-to-know-54cd0d6e8062","https://security.netapp.com/advisory/ntap-20200904-0006/","https://www.oracle.com/security-alerts/cpujan2021.html","https://www.oracle.com/security-alerts/cpuApr2021.html","https://www.oracle.com//security-alerts/cpujul2021.html","https://www.oracle.com/security-alerts/cpuoct2021.html","https://www.oracle.com/security-alerts/cpujan2022.html","https://www.oracle.com/security-alerts/cpuapr2022.html","https://github.com/FasterXML/jackson-databind/commit/3d97153944f7de9c19c1b3637b33d3cf1fbbe4d7","https://github.com/advisories/GHSA-h3cw-g4mq-c5x2"],"source_kind":"github","identifiers":["GHSA-h3cw-g4mq-c5x2","CVE-2020-24616"],"repository_url":"https://github.com/FasterXML/jackson-databind","blast_radius":0.0,"created_at":"2022-12-21T16:13:06.076Z","updated_at":"2026-06-20T04:07:55.689Z","epss_percentage":0.09346,"epss_percentile":0.94749,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWgzY3ctZzRtcS1jNXgy","html_url":"https://advisories.ecosyste.ms/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWgzY3ctZzRtcS1jNXgy","packages":[{"ecosystem":"maven","package_name":"com.fasterxml.jackson.core:jackson-databind","versions":[{"first_patched_version":"2.9.10.6","vulnerable_version_range":"\u003e= 2.0.0, \u003c= 2.9.10.5"}],"purl":null}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWgzY3ctZzRtcS1jNXgy/related_packages","related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS12NTg1LTIzaGMtYzY0N80WqA","url":"https://github.com/advisories/GHSA-v585-23hc-c647","title":"Unsafe Deserialization in jackson-databind","description":"FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to `org.apache.tomcat.dbcp.dbcp.datasources.PerUserPoolDataSource`.","origin":"UNSPECIFIED","severity":"HIGH","published_at":"2021-11-19T20:13:06.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":8.1,"cvss_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","references":["https://nvd.nist.gov/vuln/detail/CVE-2020-36186","https://github.com/FasterXML/jackson-databind/issues/2997","https://cowtowncoder.medium.com/on-jackson-cves-dont-panic-here-is-what-you-need-to-know-54cd0d6e8062","https://lists.debian.org/debian-lts-announce/2021/04/msg00025.html","https://security.netapp.com/advisory/ntap-20210205-0005/","https://www.oracle.com//security-alerts/cpujul2021.html","https://www.oracle.com/security-alerts/cpuApr2021.html","https://www.oracle.com/security-alerts/cpuoct2021.html","https://www.oracle.com/security-alerts/cpujan2022.html","https://www.oracle.com/security-alerts/cpuapr2022.html","https://www.oracle.com/security-alerts/cpujul2022.html","https://github.com/FasterXML/jackson-databind/commit/3e8fa3beea49ea62109df9e643c9cb678dabdde1","https://github.com/advisories/GHSA-v585-23hc-c647"],"source_kind":"github","identifiers":["GHSA-v585-23hc-c647","CVE-2020-36186"],"repository_url":"https://github.com/FasterXML/jackson-databind","blast_radius":0.0,"created_at":"2022-12-21T16:12:44.323Z","updated_at":"2026-06-20T04:07:55.687Z","epss_percentage":0.05218,"epss_percentile":0.91434,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS12NTg1LTIzaGMtYzY0N80WqA","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS12NTg1LTIzaGMtYzY0N80WqA","packages":[{"ecosystem":"maven","package_name":"com.fasterxml.jackson.core:jackson-databind","versions":[{"first_patched_version":"2.9.10.8","vulnerable_version_range":"\u003e= 2.0.0, \u003c 2.9.10.8"}],"purl":null}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS12NTg1LTIzaGMtYzY0N80WqA/related_packages","related_advisories":[]},{"uuid":"MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTI4OGMtY3E0aC04OGdx","url":"https://github.com/advisories/GHSA-288c-cq4h-88gq","title":"XML External Entity (XXE) Injection in Jackson Databind","description":"A flaw was found in FasterXML Jackson Databind, where it did not have entity expansion secured properly. This flaw allows vulnerability to XML external entity (XXE) attacks. The highest threat from this vulnerability is data integrity.","origin":"UNSPECIFIED","severity":"HIGH","published_at":"2021-02-18T20:51:54.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":7.5,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","references":["https://nvd.nist.gov/vuln/detail/CVE-2020-25649","https://github.com/FasterXML/jackson-databind/issues/2589","https://bugzilla.redhat.com/show_bug.cgi?id=1887664","https://lists.apache.org/thread.html/r04529cedaca40c2ff90af4880493f9c88a8ebf4d1d6c861d23108a5a@%3Cnotifications.zookeeper.apache.org%3E","https://lists.apache.org/thread.html/r0b8dc3acd4503e4ecb6fbd6ea7d95f59941168d8452ac0ab1d1d96bb@%3Cissues.zookeeper.apache.org%3E","https://lists.apache.org/thread.html/r1b7ed0c4b6c4301d4dfd6fdbc5581b0a789d3240cab55d766f33c6c6@%3Cjira.kafka.apache.org%3E","https://lists.apache.org/thread.html/r2882fc1f3032cd7be66e28787f04ec6f1874ac68d47e310e30ff7eb1@%3Cjira.kafka.apache.org%3E","https://lists.apache.org/thread.html/r2b6ddb3a4f4cd11d8f6305011e1b7438ba813511f2e3ab3180c7ffda@%3Ccommits.druid.apache.org%3E","https://lists.apache.org/thread.html/r31f4ee7d561d56a0c2c2c6eb1d6ce3e05917ff9654fdbfec05dc2b83@%3Ccommits.servicecomb.apache.org%3E","https://lists.apache.org/thread.html/r3e6ae311842de4e64c5d560a475b7f9cc7e0a9a8649363c6cf7537eb@%3Ccommits.karaf.apache.org%3E","https://lists.apache.org/thread.html/r45e7350dfc92bb192f3f88e9971c11ab2be0953cc375be3dda5170bd@%3Cissues.flink.apache.org%3E","https://lists.apache.org/thread.html/r5f8a1608d758936bd6bbc5eed980777437b611537bf6fff40663fc71@%3Cjira.kafka.apache.org%3E","https://lists.apache.org/thread.html/r63c87aab97155f3f3cbe11d030c4a184ea0de440ee714977db02e956@%3Cjira.kafka.apache.org%3E","https://lists.apache.org/thread.html/r68d029ee74ab0f3b0569d0c05f5688cb45dd3abe96a6534735252805@%3Cnotifications.zookeeper.apache.org%3E","https://lists.apache.org/thread.html/r6b11eca1d646f45eb0d35d174e6b1e47cfae5295b92000856bfb6304@%3Cdev.kafka.apache.org%3E","https://lists.apache.org/thread.html/r6b11eca1d646f45eb0d35d174e6b1e47cfae5295b92000856bfb6304@%3Cusers.kafka.apache.org%3E","https://lists.apache.org/thread.html/r6e3d4f7991542119a4ca6330271d7fbf7b9fb3abab24ada82ddf1ee4@%3Cnotifications.zookeeper.apache.org%3E","https://lists.apache.org/thread.html/r78d53a0a269c18394daf5940105dc8c7f9a2399503c2e78be20abe7e@%3Cjira.kafka.apache.org%3E","https://lists.apache.org/thread.html/r86c78bf7656fdb2dab69cbf17f3d7492300f771025f1a3a65d5e5ce5@%3Ccommits.zookeeper.apache.org%3E","https://lists.apache.org/thread.html/r8937a7160717fe8b2221767163c4de4f65bc5466405cb1c5310f9080@%3Cdev.kafka.apache.org%3E","https://lists.apache.org/thread.html/r8937a7160717fe8b2221767163c4de4f65bc5466405cb1c5310f9080@%3Cusers.kafka.apache.org%3E","https://lists.apache.org/thread.html/r900d4408c4189b376d1ec580ea7740ea6f8710dc2f0b7e9c9eeb5ae0@%3Cdev.zookeeper.apache.org%3E","https://lists.apache.org/thread.html/r90d1e97b0a743cf697d89a792a9b669909cc5a1692d1e0083a22e66c@%3Cissues.zookeeper.apache.org%3E","https://lists.apache.org/thread.html/r91722ecfba688b0c565675f8bf380269fde8ec62b54d6161db544c22@%3Ccommits.karaf.apache.org%3E","https://lists.apache.org/thread.html/r94c7e86e546120f157264ba5ba61fd29b3a8d530ed325a9b4fa334d7@%3Ccommits.zookeeper.apache.org%3E","https://lists.apache.org/thread.html/r95a297eb5fd1f2d3a2281f15340e2413f952e9d5503296c3adc7201a@%3Ccommits.tomee.apache.org%3E","https://lists.apache.org/thread.html/r98bfe3b90ea9408f12c4b447edcb5638703d80bc782430aa0c210a54@%3Cissues.zookeeper.apache.org%3E","https://lists.apache.org/thread.html/ra1157e57a01d25e36b0dc17959ace758fc21ba36746de29ba1d8b130@%3Cjira.kafka.apache.org%3E","https://lists.apache.org/thread.html/ra95faf968f3463acb3f31a6fbec31453fc5045325f99f396961886d3@%3Cissues.flink.apache.org%3E","https://lists.apache.org/thread.html/raf13235de6df1d47a717199e1ecd700dff3236632f5c9a1488d9845b@%3Cjira.kafka.apache.org%3E","https://lists.apache.org/thread.html/rb674520b9f6c808c1bf263b1369e14048ec3243615f35cfd24e33604@%3Cissues.zookeeper.apache.org%3E","https://lists.apache.org/thread.html/rc15e90bbef196a5c6c01659e015249d6c9a73581ca9afb8aeecf00d2@%3Cjira.kafka.apache.org%3E","https://lists.apache.org/thread.html/rc88f2fa2b7bd6443921727aeee7704a1fb02433e722e2abf677e0d3d@%3Ccommits.zookeeper.apache.org%3E","https://lists.apache.org/thread.html/rc959cdb57c4fe198316130ff4a5ecbf9d680e356032ff2e9f4f05d54@%3Cjira.kafka.apache.org%3E","https://lists.apache.org/thread.html/rd317f15a675d114dbf5b488d27eeb2467b4424356b16116eb18a652d@%3Cjira.kafka.apache.org%3E","https://lists.apache.org/thread.html/rd6f6bf848c2d47fa4a85c27d011d948778b8f7e58ba495968435a0b3@%3Cissues.zookeeper.apache.org%3E","https://lists.apache.org/thread.html/rdf9a34726482222c90d50ae1b9847881de67dde8cfde4999633d2cdc@%3Ccommits.zookeeper.apache.org%3E","https://lists.apache.org/thread.html/re16f81d3ad49a93dd2f0cba9f8fc88e5fb89f30bf9a2ad7b6f3e69c1@%3Ccommits.karaf.apache.org%3E","https://lists.apache.org/thread.html/re96dc7a13e13e56190a5d80f9e5440a0d0c83aeec6467b562fbf2dca@%3Cjira.kafka.apache.org%3E","https://lists.apache.org/thread.html/rf1809a1374041a969d77afab21fc38925de066bc97e86157d3ac3402@%3Ccommits.karaf.apache.org%3E","https://lists.apache.org/thread.html/r0881e23bd9034c8f51fdccdc8f4d085ba985dcd738f8520569ca5c3d@%3Cissues.hive.apache.org%3E","https://lists.apache.org/thread.html/r2eb66c182853c69ecfb52f63d3dec09495e9b65be829fd889a081ae1@%3Cdev.hive.apache.org%3E","https://lists.apache.org/thread.html/r5b130fe668503c4b7e2caf1b16f86b7f2070fd1b7ef8f26195a2ffbd@%3Cissues.hive.apache.org%3E","https://lists.apache.org/thread.html/rd57c7582adc90e233f23f3727db3df9115b27a823b92374f11453f34@%3Cissues.hive.apache.org%3E","https://lists.apache.org/thread.html/r011d1430e8f40dff9550c3bc5d0f48b14c01ba8aecabd91d5e495386@%3Ccommits.turbine.apache.org%3E","https://lists.apache.org/thread.html/r2f5c5479f99398ef344b7ebd4d90bc3316236c45d0f3bc42090efcd7@%3Cissues.hive.apache.org%3E","https://lists.apache.org/thread.html/r407538adec3185dd35a05c9a26ae2f74425b15132470cf540f41d85b@%3Cissues.hive.apache.org%3E","https://lists.apache.org/thread.html/r605764e05e201db33b3e9c2e66ff620658f07ad74f296abe483f7042@%3Creviews.iotdb.apache.org%3E","https://lists.apache.org/thread.html/r765283e145049df9b8998f14dcd444345555aae02b1610cfb3188bf8@%3Cnotifications.iotdb.apache.org%3E","https://lists.apache.org/thread.html/r7cb5b4b3e4bd41a8042e5725b7285877a17bcbf07f4eb3f7b316af60@%3Creviews.iotdb.apache.org%3E","https://lists.apache.org/thread.html/r6cbd599b80e787f02ff7a1391d9278a03f37d6a6f4f943f0f01a62fb@%3Creviews.iotdb.apache.org%3E","https://lists.apache.org/thread.html/r73bef1bb601a9f093f915f8075eb49fcca51efade57b817afd5def07@%3Ccommits.iotdb.apache.org%3E","https://lists.apache.org/thread.html/ra409f798a1e5a6652b7097429b388650ccd65fd958cee0b6f69bba00@%3Cissues.hive.apache.org%3E","https://lists.apache.org/thread.html/rdca8711bb7aa5d47a44682606cd0ea3497e2e922f22b7ee83e81e6c1@%3Cissues.hive.apache.org%3E","https://lists.apache.org/thread.html/r8ae961c80930e2717c75025414ce48a432cea1137c02f648b1fb9524@%3Cissues.hive.apache.org%3E","https://lists.apache.org/thread.html/r6a4f3ef6edfed2e0884269d84798f766779bbbc1005f7884e0800d61@%3Cdev.knox.apache.org%3E","https://lists.apache.org/thread.html/rc82ff47853289e9cd17f5cfbb053c04cafc75ee32e3d7223963f83bb@%3Cdev.knox.apache.org%3E","https://www.oracle.com/security-alerts/cpuApr2021.html","https://lists.apache.org/thread.html/r8764bb835bcb8e311c882ff91dd3949c9824e905e880930be56f6ba3@%3Cuser.spark.apache.org%3E","https://lists.apache.org/thread.html/r61db8e7dcb56dc000a5387a88f7a473bacec5ee01b9ff3f55308aacc@%3Cdev.kafka.apache.org%3E","https://lists.apache.org/thread.html/r61db8e7dcb56dc000a5387a88f7a473bacec5ee01b9ff3f55308aacc@%3Cusers.kafka.apache.org%3E","https://www.oracle.com//security-alerts/cpujul2021.html","https://lists.apache.org/thread.html/rbf4ce74b0d1fa9810dec50ba3ace0caeea677af7c27a97111c06ccb7@%3Cdev.kafka.apache.org%3E","https://lists.apache.org/thread.html/rbf4ce74b0d1fa9810dec50ba3ace0caeea677af7c27a97111c06ccb7@%3Cusers.kafka.apache.org%3E","https://lists.apache.org/thread.html/r024b7bda9c43c5560d81238748775c5ecfe01b57280f90df1f773949@%3Cissues.hive.apache.org%3E","https://lists.apache.org/thread.html/r6a6df5647583541e3cb71c75141008802f7025cee1c430d4ed78f4cc@%3Cissues.hive.apache.org%3E","https://www.oracle.com/security-alerts/cpuoct2021.html","https://www.oracle.com/security-alerts/cpujan2022.html","https://www.oracle.com/security-alerts/cpuapr2022.html","https://www.oracle.com/security-alerts/cpujul2022.html","https://github.com/FasterXML/jackson-databind/commit/3d932709abd0b5390efe67451653fc9efa9db677","https://github.com/FasterXML/jackson-databind/commit/612f971b78c60202e9cd75a299050c8f2d724a59","https://security.netapp.com/advisory/ntap-20210108-0007","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6X2UT4X6M7DLQYBOOHMXBWGYJ65RL2CT","https://github.com/advisories/GHSA-288c-cq4h-88gq"],"source_kind":"github","identifiers":["GHSA-288c-cq4h-88gq","CVE-2020-25649"],"repository_url":"https://github.com/FasterXML/jackson-databind","blast_radius":0.0,"created_at":"2022-12-21T16:13:11.444Z","updated_at":"2026-06-20T04:06:15.705Z","epss_percentage":0.17611,"epss_percentile":0.96765,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTI4OGMtY3E0aC04OGdx","html_url":"https://advisories.ecosyste.ms/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTI4OGMtY3E0aC04OGdx","packages":[{"ecosystem":"maven","package_name":"com.fasterxml.jackson.core:jackson-databind","versions":[{"first_patched_version":"2.6.7.4","vulnerable_version_range":"\u003e= 2.6.0, \u003c= 2.6.7.3"},{"first_patched_version":"2.10.5.1","vulnerable_version_range":"\u003e= 2.10.0.0, \u003c= 2.10.5.0"},{"first_patched_version":"2.9.10.7","vulnerable_version_range":"\u003e= 2.7.0.0, \u003c= 2.9.10.6"}],"purl":null}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTI4OGMtY3E0aC04OGdx/related_packages","related_advisories":[]},{"uuid":"MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTU5NDktcnc3Zy13eDd3","url":"https://github.com/advisories/GHSA-5949-rw7g-wx7w","title":"Deserialization of untrusted data in jackson-databind","description":"A flaw was found in jackson-databind before 2.9.10.7 and 2.6.7.5. FasterXML mishandles the interaction between serialization gadgets and typing. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.","origin":"UNSPECIFIED","severity":"HIGH","published_at":"2021-01-20T21:20:15.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":8.1,"cvss_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","references":["https://nvd.nist.gov/vuln/detail/CVE-2021-20190","https://github.com/FasterXML/jackson-databind/issues/2854","https://github.com/FasterXML/jackson-databind/commit/7dbf51bf78d157098074a20bd9da39bd48c18e4a","https://bugzilla.redhat.com/show_bug.cgi?id=1916633","https://lists.apache.org/thread.html/r380e9257bacb8551ee6fcf2c59890ae9477b2c78e553fa9ea08e9d9a@%3Ccommits.nifi.apache.org%3E","https://lists.debian.org/debian-lts-announce/2021/04/msg00025.html","https://www.oracle.com//security-alerts/cpujul2021.html","https://github.com/FasterXML/jackson-databind/commit/08fbfacf89a4a4c026a6227a1b470ab7a13e2e88","https://security.netapp.com/advisory/ntap-20210219-0008","https://github.com/advisories/GHSA-5949-rw7g-wx7w"],"source_kind":"github","identifiers":["GHSA-5949-rw7g-wx7w","CVE-2021-20190"],"repository_url":"https://github.com/FasterXML/jackson-databind","blast_radius":0.0,"created_at":"2022-12-21T16:13:11.950Z","updated_at":"2026-06-20T04:08:24.773Z","epss_percentage":0.07483,"epss_percentile":0.93691,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTU5NDktcnc3Zy13eDd3","html_url":"https://advisories.ecosyste.ms/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTU5NDktcnc3Zy13eDd3","packages":[{"ecosystem":"maven","package_name":"com.fasterxml.jackson.core:jackson-databind","versions":[{"first_patched_version":"2.6.7.5","vulnerable_version_range":"\u003c 2.6.7.5"},{"first_patched_version":"2.9.10.7","vulnerable_version_range":"\u003e= 2.7.0, \u003c 2.9.10.7"}],"purl":null}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTU5NDktcnc3Zy13eDd3/related_packages","related_advisories":[]},{"uuid":"MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXczZjQtM3E2ai1yaDgy","url":"https://github.com/advisories/GHSA-w3f4-3q6j-rh82","title":"Deserialization of Untrusted Data in jackson-databind","description":"FasterXML jackson-databind through 2.8.11 and 2.9.x through 2.9.3 allows unauthenticated remote code execution because of an incomplete fix for the CVE-2017-7525 and CVE-2017-17485 deserialization flaws. This is exploitable via two different gadgets that bypass a blacklist.","origin":"UNSPECIFIED","severity":"HIGH","published_at":"2020-06-30T20:40:50.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":8.1,"cvss_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","references":["https://nvd.nist.gov/vuln/detail/CVE-2018-5968","https://github.com/FasterXML/jackson-databind/issues/1899","https://github.com/GulajavaMinistudio/jackson-databind/pull/92/commits/038b471e2efde2e8f96b4e0be958d3e5a1ff1d05","https://access.redhat.com/errata/RHSA-2018:0478","https://access.redhat.com/errata/RHSA-2018:0479","https://access.redhat.com/errata/RHSA-2018:0480","https://access.redhat.com/errata/RHSA-2018:0481","https://access.redhat.com/errata/RHSA-2018:1525","https://access.redhat.com/errata/RHSA-2019:2858","https://access.redhat.com/errata/RHSA-2019:3149","https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbhf03902en_us","https://www.debian.org/security/2018/dsa-4114","https://www.oracle.com/security-alerts/cpuoct2020.html","https://github.com/FasterXML/jackson-databind/commit/038b471e2efde2e8f96b4e0be958d3e5a1ff1d0","https://github.com/FasterXML/jackson-databind/commit/03ea0bec6293d4330b5ad19d1d62aca0e3cb6381","https://github.com/FasterXML/jackson-databind/commit/454be8bb8c913be18298327a84ca45a280b61605","https://security.netapp.com/advisory/ntap-20180423-0002","https://github.com/advisories/GHSA-w3f4-3q6j-rh82"],"source_kind":"github","identifiers":["GHSA-w3f4-3q6j-rh82","CVE-2018-5968"],"repository_url":"https://github.com/FasterXML/jackson-databind","blast_radius":0.0,"created_at":"2022-12-21T16:13:23.844Z","updated_at":"2026-06-20T05:08:02.503Z","epss_percentage":0.07008,"epss_percentile":0.93338,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXczZjQtM3E2ai1yaDgy","html_url":"https://advisories.ecosyste.ms/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXczZjQtM3E2ai1yaDgy","packages":[{"ecosystem":"maven","package_name":"com.fasterxml.jackson.core:jackson-databind","versions":[{"first_patched_version":"2.9.4","vulnerable_version_range":"\u003e= 2.9.0, \u003c 2.9.4"}],"purl":null}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXczZjQtM3E2ai1yaDgy/related_packages","related_advisories":[]},{"uuid":"MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWMycTMtNHFyaC1mbTQ4","url":"https://github.com/advisories/GHSA-c2q3-4qrh-fm48","title":"Deserialization of untrusted data in Jackson Databind","description":"FasterXML jackson-databind 2.x before 2.9.10.5 mishandles the interaction between serialization gadgets and typing, related to oracle.jms.AQjmsQueueConnectionFactory, oracle.jms.AQjmsXATopicConnectionFactory, oracle.jms.AQjmsTopicConnectionFactory, oracle.jms.AQjmsXAQueueConnectionFactory, and oracle.jms.AQjmsXAConnectionFactory (aka weblogic/oracle-aqjms).","origin":"UNSPECIFIED","severity":"HIGH","published_at":"2020-06-18T14:44:50.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":8.1,"cvss_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","references":["https://nvd.nist.gov/vuln/detail/CVE-2020-14061","https://github.com/FasterXML/jackson-databind/issues/2698","https://github.com/FasterXML/jackson-databind/commit/5c8642aeae9c756b438ab7637c90ef3c77966e6e","https://medium.com/@cowtowncoder/on-jackson-cves-dont-panic-here-is-what-you-need-to-know-54cd0d6e8062","https://snyk.io/vuln/SNYK-JAVA-COMFASTERXMLJACKSONCORE-572316","https://lists.debian.org/debian-lts-announce/2020/07/msg00001.html","https://security.netapp.com/advisory/ntap-20200702-0003/","https://www.oracle.com/security-alerts/cpuApr2021.html","https://www.oracle.com/security-alerts/cpujan2021.html","https://www.oracle.com/security-alerts/cpuoct2020.html","https://www.oracle.com//security-alerts/cpujul2021.html","https://www.oracle.com/security-alerts/cpuoct2021.html","https://github.com/advisories/GHSA-c2q3-4qrh-fm48"],"source_kind":"github","identifiers":["GHSA-c2q3-4qrh-fm48","CVE-2020-14061"],"repository_url":"https://github.com/FasterXML/jackson-databind","blast_radius":0.0,"created_at":"2022-12-21T16:13:23.984Z","updated_at":"2026-06-20T04:11:29.544Z","epss_percentage":0.04421,"epss_percentile":0.90106,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWMycTMtNHFyaC1mbTQ4","html_url":"https://advisories.ecosyste.ms/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWMycTMtNHFyaC1mbTQ4","packages":[{"ecosystem":"maven","package_name":"com.fasterxml.jackson.core:jackson-databind","versions":[{"first_patched_version":"2.9.10.5","vulnerable_version_range":"\u003e= 2.9.0, \u003c= 2.9.10.4"}],"purl":null}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWMycTMtNHFyaC1mbTQ4/related_packages","related_advisories":[]},{"uuid":"MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWMyNjUtMzd2ai1jd2Nj","url":"https://github.com/advisories/GHSA-c265-37vj-cwcc","title":"Deserialization of untrusted data in Jackson Databind","description":"FasterXML jackson-databind 2.x before 2.9.10.5 mishandles the interaction between serialization gadgets and typing, related to com.sun.org.apache.xalan.internal.lib.sql.JNDIConnectionPool (aka xalan2).","origin":"UNSPECIFIED","severity":"HIGH","published_at":"2020-06-18T14:44:48.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":8.1,"cvss_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","references":["https://nvd.nist.gov/vuln/detail/CVE-2020-14062","https://github.com/FasterXML/jackson-databind/issues/2704","https://github.com/FasterXML/jackson-databind/commit/99001cdb6807b5c7b170ec6a9092ecbb618ae79c","https://medium.com/@cowtowncoder/on-jackson-cves-dont-panic-here-is-what-you-need-to-know-54cd0d6e8062","https://snyk.io/vuln/SNYK-JAVA-COMFASTERXMLJACKSONCORE-570625","https://lists.debian.org/debian-lts-announce/2020/07/msg00001.html","https://www.oracle.com/security-alerts/cpuApr2021.html","https://www.oracle.com/security-alerts/cpujan2021.html","https://www.oracle.com/security-alerts/cpuoct2020.html","https://www.oracle.com//security-alerts/cpujul2021.html","https://www.oracle.com/security-alerts/cpuoct2021.html","https://github.com/FasterXML/jackson-databind/commit/840eae2ca81c597a0010b2126f32dce17d384b70","https://security.netapp.com/advisory/ntap-20200702-0003","https://medium.com/%40cowtowncoder/on-jackson-cves-dont-panic-here-is-what-you-need-to-know-54cd0d6e8062","https://github.com/advisories/GHSA-c265-37vj-cwcc"],"source_kind":"github","identifiers":["GHSA-c265-37vj-cwcc","CVE-2020-14062"],"repository_url":"https://github.com/FasterXML/jackson-databind","blast_radius":0.0,"created_at":"2022-12-21T16:13:23.993Z","updated_at":"2026-06-20T04:05:21.823Z","epss_percentage":0.08007,"epss_percentile":0.94027,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWMyNjUtMzd2ai1jd2Nj","html_url":"https://advisories.ecosyste.ms/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWMyNjUtMzd2ai1jd2Nj","packages":[{"ecosystem":"maven","package_name":"com.fasterxml.jackson.core:jackson-databind","versions":[{"first_patched_version":"2.9.10.5","vulnerable_version_range":"\u003e= 2.9.0, \u003c= 2.9.10.4"}],"purl":null}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWMyNjUtMzd2ai1jd2Nj/related_packages","related_advisories":[]},{"uuid":"MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWo4MjMtNHFjaC0zcmdt","url":"https://github.com/advisories/GHSA-j823-4qch-3rgm","title":"Deserialization of untrusted data in Jackson Databind","description":"FasterXML jackson-databind 2.x before 2.9.10.5 mishandles the interaction between serialization gadgets and typing, related to oadd.org.apache.xalan.lib.sql.JNDIConnectionPool (aka apache/drill).","origin":"UNSPECIFIED","severity":"HIGH","published_at":"2020-06-18T14:44:46.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":8.1,"cvss_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","references":["https://nvd.nist.gov/vuln/detail/CVE-2020-14060","https://github.com/FasterXML/jackson-databind/issues/2688","https://github.com/FasterXML/jackson-databind/commit/d1c67a0396e84c08d0558fbb843b5bd1f26e1921","https://medium.com/@cowtowncoder/on-jackson-cves-dont-panic-here-is-what-you-need-to-know-54cd0d6e8062","https://snyk.io/vuln/SNYK-JAVA-COMFASTERXMLJACKSONCORE-572314","https://lists.debian.org/debian-lts-announce/2020/07/msg00001.html","https://www.oracle.com/security-alerts/cpuApr2021.html","https://www.oracle.com/security-alerts/cpujan2021.html","https://www.oracle.com/security-alerts/cpuoct2020.html","https://www.oracle.com//security-alerts/cpujul2021.html","https://www.oracle.com/security-alerts/cpuoct2021.html","https://github.com/FasterXML/jackson-databind/commit/08fbfacf89a4a4c026a6227a1b470ab7a13e2e88","https://github.com/FasterXML/jackson-databind/commit/ac7232e3f9004bdb4f11dcb5bc6c1fadf074f5f7","https://security.netapp.com/advisory/ntap-20200702-0003","https://medium.com/%40cowtowncoder/on-jackson-cves-dont-panic-here-is-what-you-need-to-know-54cd0d6e8062","https://github.com/advisories/GHSA-j823-4qch-3rgm"],"source_kind":"github","identifiers":["GHSA-j823-4qch-3rgm","CVE-2020-14060"],"repository_url":"https://github.com/FasterXML/jackson-databind","blast_radius":0.0,"created_at":"2022-12-21T16:13:24.002Z","updated_at":"2026-06-20T04:06:15.704Z","epss_percentage":0.08537,"epss_percentile":0.94361,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWo4MjMtNHFjaC0zcmdt","html_url":"https://advisories.ecosyste.ms/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWo4MjMtNHFjaC0zcmdt","packages":[{"ecosystem":"maven","package_name":"com.fasterxml.jackson.core:jackson-databind","versions":[{"first_patched_version":"2.9.10.5","vulnerable_version_range":"\u003e= 2.9.0, \u003c= 2.9.10.4"}],"purl":null}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWo4MjMtNHFjaC0zcmdt/related_packages","related_advisories":[]},{"uuid":"MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLW1jNmgtNHFncC0zN3Fo","url":"https://github.com/advisories/GHSA-mc6h-4qgp-37qh","title":"Deserialization of untrusted data in Jackson Databind","description":"FasterXML jackson-databind 2.x before 2.9.10.5 mishandles the interaction between serialization gadgets and typing, related to org.jsecurity.realm.jndi.JndiRealmFactory (aka org.jsecurity).","origin":"UNSPECIFIED","severity":"HIGH","published_at":"2020-06-18T14:44:43.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":8.1,"cvss_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","references":["https://nvd.nist.gov/vuln/detail/CVE-2020-14195","https://github.com/FasterXML/jackson-databind/issues/2765","https://github.com/FasterXML/jackson-databind/commit/f6d9c664f6d481703138319f6a0f1fdbddb3a259","https://lists.debian.org/debian-lts-announce/2020/07/msg00001.html","https://www.oracle.com/security-alerts/cpuApr2021.html","https://www.oracle.com/security-alerts/cpujan2021.html","https://www.oracle.com/security-alerts/cpuoct2020.html","https://www.oracle.com//security-alerts/cpujul2021.html","https://www.oracle.com/security-alerts/cpuoct2021.html","https://github.com/FasterXML/jackson-databind/commit/08fbfacf89a4a4c026a6227a1b470ab7a13e2e88","https://security.netapp.com/advisory/ntap-20200702-0003","https://github.com/advisories/GHSA-mc6h-4qgp-37qh"],"source_kind":"github","identifiers":["GHSA-mc6h-4qgp-37qh","CVE-2020-14195"],"repository_url":"https://github.com/FasterXML/jackson-databind","blast_radius":0.0,"created_at":"2022-12-21T16:13:24.012Z","updated_at":"2026-06-20T04:06:15.704Z","epss_percentage":0.04511,"epss_percentile":0.90293,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLW1jNmgtNHFncC0zN3Fo","html_url":"https://advisories.ecosyste.ms/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLW1jNmgtNHFncC0zN3Fo","packages":[{"ecosystem":"maven","package_name":"com.fasterxml.jackson.core:jackson-databind","versions":[{"first_patched_version":"2.9.10.5","vulnerable_version_range":"\u003e= 2.9.0, \u003c= 2.9.10.4"}],"purl":null}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLW1jNmgtNHFncC0zN3Fo/related_packages","related_advisories":[]},{"uuid":"MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXdycjctMzNmeC1yY3Zq","url":"https://github.com/advisories/GHSA-wrr7-33fx-rcvj","title":"Deserialization of Untrusted Data in jackson-databind","description":"**Withdrawn:** Duplicate of GHSA-cjjf-94ff-43w7","origin":"UNSPECIFIED","severity":"HIGH","published_at":"2020-06-15T18:44:56.000Z","withdrawn_at":"2020-06-16T20:28:06.000Z","classification":"GENERAL","cvss_score":0.0,"cvss_vector":null,"references":["https://nvd.nist.gov/vuln/detail/CVE-2018-12022","https://github.com/FasterXML/jackson-databind/issues/2052","https://github.com/FasterXML/jackson-databind/commit/28badf7ef60ac3e7ef151cd8e8ec010b8479226a","https://access.redhat.com/errata/RHBA-2019:0959","https://access.redhat.com/errata/RHSA-2019:0782","https://access.redhat.com/errata/RHSA-2019:0877","https://access.redhat.com/errata/RHSA-2019:1106","https://access.redhat.com/errata/RHSA-2019:1107","https://access.redhat.com/errata/RHSA-2019:1108","https://access.redhat.com/errata/RHSA-2019:1140","https://access.redhat.com/errata/RHSA-2019:1782","https://access.redhat.com/errata/RHSA-2019:1797","https://access.redhat.com/errata/RHSA-2019:1822","https://access.redhat.com/errata/RHSA-2019:1823","https://access.redhat.com/errata/RHSA-2019:2804","https://access.redhat.com/errata/RHSA-2019:2858","https://access.redhat.com/errata/RHSA-2019:3002","https://access.redhat.com/errata/RHSA-2019:3140","https://access.redhat.com/errata/RHSA-2019:3149","https://access.redhat.com/errata/RHSA-2019:3892","https://access.redhat.com/errata/RHSA-2019:4037","https://bugzilla.redhat.com/show_bug.cgi?id=1671098","https://lists.apache.org/thread.html/519eb0fd45642dcecd9ff74cb3e71c20a4753f7d82e2f07864b5108f@%3Cdev.drill.apache.org%3E","https://lists.apache.org/thread.html/7fcf88aff0d1deaa5c3c7be8d58c05ad7ad5da94b59065d8e7c50c5d@%3Cissues.lucene.apache.org%3E","https://lists.apache.org/thread.html/b0656d359c7d40ec9f39c8cc61bca66802ef9a2a12ee199f5b0c1442@%3Cdev.drill.apache.org%3E","https://lists.apache.org/thread.html/f9bc3e55f4e28d1dcd1a69aae6d53e609a758e34d2869b4d798e13cc@%3Cissues.drill.apache.org%3E","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZEDLDUYBSTDY4GWDBUXGJNS2RFYTFVRC/","https://medium.com/@cowtowncoder/on-jackson-cves-dont-panic-here-is-what-you-need-to-know-54cd0d6e8062","https://seclists.org/bugtraq/2019/May/68","https://security.netapp.com/advisory/ntap-20190530-0003/","https://www.blackhat.com/docs/us-16/materials/us-16-Munoz-A-Journey-From-JNDI-LDAP-Manipulation-To-RCE.pdf","https://www.debian.org/security/2019/dsa-4452","https://www.oracle.com/security-alerts/cpuapr2020.html","https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html","https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html","http://www.securityfocus.com/bid/107585","https://github.com/advisories/GHSA-wrr7-33fx-rcvj"],"source_kind":"github","identifiers":["GHSA-wrr7-33fx-rcvj"],"repository_url":"https://github.com/FasterXML/jackson-databind","blast_radius":0.0,"created_at":"2022-12-21T16:13:24.140Z","updated_at":"2026-06-20T04:11:29.549Z","epss_percentage":null,"epss_percentile":null,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXdycjctMzNmeC1yY3Zq","html_url":"https://advisories.ecosyste.ms/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXdycjctMzNmeC1yY3Zq","packages":[{"ecosystem":"maven","package_name":"com.fasterxml.jackson.core:jackson-databind","versions":[{"first_patched_version":"2.9.6","vulnerable_version_range":"\u003e= 2.9.0, \u003c 2.9.6"},{"first_patched_version":"2.8.11.2","vulnerable_version_range":"\u003e= 2.8.0, \u003c= 2.8.11.1"},{"first_patched_version":"2.7.9.4","vulnerable_version_range":"\u003e= 2.7.0, \u003c= 2.7.9.3"}],"purl":null}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXdycjctMzNmeC1yY3Zq/related_packages","related_advisories":[]},{"uuid":"MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTZ3cXAtdjR2Ni1jODdj","url":"https://github.com/advisories/GHSA-6wqp-v4v6-c87c","title":"Deserialization of Untrusted Data","description":"An issue was discovered in FasterXML jackson-databind prior to 2.7.9.4, 2.8.11.2, and 2.9.6. When Default Typing is enabled (either globally or for a specific property), the service has the Oracle JDBC jar in the classpath, and an attacker can provide an LDAP service to access, it is possible to make the service execute a malicious payload.","origin":"UNSPECIFIED","severity":"HIGH","published_at":"2020-06-15T18:44:51.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":7.5,"cvss_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","references":["https://nvd.nist.gov/vuln/detail/CVE-2018-12023","https://github.com/FasterXML/jackson-databind/issues/2058","https://github.com/FasterXML/jackson-databind/commit/28badf7ef60ac3e7ef151cd8e8ec010b8479226a","https://access.redhat.com/errata/RHBA-2019:0959","https://access.redhat.com/errata/RHSA-2019:0782","https://access.redhat.com/errata/RHSA-2019:0877","https://access.redhat.com/errata/RHSA-2019:1106","https://access.redhat.com/errata/RHSA-2019:1107","https://access.redhat.com/errata/RHSA-2019:1108","https://access.redhat.com/errata/RHSA-2019:1140","https://access.redhat.com/errata/RHSA-2019:1782","https://access.redhat.com/errata/RHSA-2019:1797","https://access.redhat.com/errata/RHSA-2019:1822","https://access.redhat.com/errata/RHSA-2019:1823","https://access.redhat.com/errata/RHSA-2019:2804","https://access.redhat.com/errata/RHSA-2019:2858","https://access.redhat.com/errata/RHSA-2019:3002","https://access.redhat.com/errata/RHSA-2019:3140","https://access.redhat.com/errata/RHSA-2019:3149","https://access.redhat.com/errata/RHSA-2019:3892","https://access.redhat.com/errata/RHSA-2019:4037","https://lists.apache.org/thread.html/519eb0fd45642dcecd9ff74cb3e71c20a4753f7d82e2f07864b5108f@%3Cdev.drill.apache.org%3E","https://lists.apache.org/thread.html/7fcf88aff0d1deaa5c3c7be8d58c05ad7ad5da94b59065d8e7c50c5d@%3Cissues.lucene.apache.org%3E","https://lists.apache.org/thread.html/b0656d359c7d40ec9f39c8cc61bca66802ef9a2a12ee199f5b0c1442@%3Cdev.drill.apache.org%3E","https://lists.apache.org/thread.html/f9bc3e55f4e28d1dcd1a69aae6d53e609a758e34d2869b4d798e13cc@%3Cissues.drill.apache.org%3E","https://seclists.org/bugtraq/2019/May/68","https://www.blackhat.com/docs/us-16/materials/us-16-Munoz-A-Journey-From-JNDI-LDAP-Manipulation-To-RCE.pdf","https://www.debian.org/security/2019/dsa-4452","https://www.oracle.com/security-alerts/cpuapr2020.html","https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html","https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html","https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html","https://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html","http://www.securityfocus.com/bid/105659","https://www.oracle.com/security-alerts/cpujul2020.html","https://www.oracle.com/security-alerts/cpuoct2020.html","https://github.com/FasterXML/jackson-databind/commit/7487cf7eb14be2f65a1eb108e8629c07ef45e0a","https://github.com/FasterXML/jackson-databind/commit/bf261d404c2f79fd3406237710d40ebb03c99d84","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZEDLDUYBSTDY4GWDBUXGJNS2RFYTFVRC","https://security.netapp.com/advisory/ntap-20190530-0003","https://github.com/advisories/GHSA-6wqp-v4v6-c87c"],"source_kind":"github","identifiers":["GHSA-6wqp-v4v6-c87c","CVE-2018-12023"],"repository_url":"https://github.com/FasterXML/jackson-databind","blast_radius":0.0,"created_at":"2022-12-21T16:13:24.131Z","updated_at":"2026-06-20T04:06:20.023Z","epss_percentage":0.08872,"epss_percentile":0.94551,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTZ3cXAtdjR2Ni1jODdj","html_url":"https://advisories.ecosyste.ms/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTZ3cXAtdjR2Ni1jODdj","packages":[{"ecosystem":"maven","package_name":"com.fasterxml.jackson.core:jackson-databind","versions":[{"first_patched_version":"2.9.6","vulnerable_version_range":"\u003e= 2.9.0, \u003c 2.9.6"},{"first_patched_version":"2.8.11.2","vulnerable_version_range":"\u003e= 2.8.0, \u003c= 2.8.11.1"},{"first_patched_version":"2.7.9.4","vulnerable_version_range":"\u003e= 2.7.0, \u003c= 2.7.9.3"}],"purl":null}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTZ3cXAtdjR2Ni1jODdj/related_packages","related_advisories":[]},{"uuid":"MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWYzajUtcm1tcC0zZmM1","url":"https://github.com/advisories/GHSA-f3j5-rmmp-3fc5","title":"Improper Input Validation in jackson-databind","description":"A Polymorphic Typing issue was discovered in FasterXML jackson-databind before 2.9.10 and 2.8.11.5. It is related to net.sf.ehcache.hibernate.EhcacheJtaTransactionManagerLookup.","origin":"UNSPECIFIED","severity":"CRITICAL","published_at":"2020-06-15T18:44:48.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":9.8,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","references":["https://nvd.nist.gov/vuln/detail/CVE-2019-17267","https://github.com/FasterXML/jackson-databind/issues/2460","https://github.com/FasterXML/jackson-databind/compare/jackson-databind-2.9.9.3...jackson-databind-2.9.10","https://access.redhat.com/errata/RHSA-2019:3200","https://access.redhat.com/errata/RHSA-2020:0159","https://access.redhat.com/errata/RHSA-2020:0160","https://access.redhat.com/errata/RHSA-2020:0161","https://access.redhat.com/errata/RHSA-2020:0164","https://access.redhat.com/errata/RHSA-2020:0445","https://lists.apache.org/thread.html/519eb0fd45642dcecd9ff74cb3e71c20a4753f7d82e2f07864b5108f@%3Cdev.drill.apache.org%3E","https://lists.apache.org/thread.html/b0656d359c7d40ec9f39c8cc61bca66802ef9a2a12ee199f5b0c1442@%3Cdev.drill.apache.org%3E","https://lists.apache.org/thread.html/f9bc3e55f4e28d1dcd1a69aae6d53e609a758e34d2869b4d798e13cc@%3Cissues.drill.apache.org%3E","https://lists.apache.org/thread.html/r392099ed2757ff2e383b10440594e914d080511d7da1c8fed0612c1f@%3Ccommits.druid.apache.org%3E","https://lists.apache.org/thread.html/r9d727fc681fb3828794acbefcaee31393742b4d73a29461ccd9597a8@%3Cdev.skywalking.apache.org%3E","https://lists.debian.org/debian-lts-announce/2019/12/msg00013.html","https://security.netapp.com/advisory/ntap-20191017-0006/","https://www.oracle.com/security-alerts/cpujan2020.html","https://www.oracle.com/security-alerts/cpujul2020.html","https://lists.apache.org/thread.html/r1b103833cb5bc8466e24ff0ecc5e75b45a705334ab6a444e64e840a0@%3Cissues.bookkeeper.apache.org%3E","https://lists.apache.org/thread.html/rf1bbc0ea4a9f014cf94df9a12a6477d24a27f52741dbc87f2fd52ff2@%3Cissues.geode.apache.org%3E","https://www.oracle.com/security-alerts/cpuoct2020.html","https://github.com/FasterXML/jackson-databind/commit/191a4cdf87b56d2ddddb77edd895ee756b7f75eb","https://github.com/advisories/GHSA-f3j5-rmmp-3fc5"],"source_kind":"github","identifiers":["GHSA-f3j5-rmmp-3fc5","CVE-2019-17267"],"repository_url":"https://github.com/FasterXML/jackson-databind","blast_radius":0.0,"created_at":"2022-12-21T16:13:24.114Z","updated_at":"2026-06-20T04:07:56.737Z","epss_percentage":0.0459,"epss_percentile":0.90433,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWYzajUtcm1tcC0zZmM1","html_url":"https://advisories.ecosyste.ms/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWYzajUtcm1tcC0zZmM1","packages":[{"ecosystem":"maven","package_name":"com.fasterxml.jackson.core:jackson-databind","versions":[{"first_patched_version":"2.8.11.5","vulnerable_version_range":"\u003c 2.8.11.5"},{"first_patched_version":"2.9.10","vulnerable_version_range":"\u003e= 2.9.0, \u003c 2.9.10"}],"purl":null}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWYzajUtcm1tcC0zZmM1/related_packages","related_advisories":[]},{"uuid":"MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTU4cHAtOWM3Ni01NjI1","url":"https://github.com/advisories/GHSA-58pp-9c76-5625","title":"jackson-databind mishandles the interaction between serialization gadgets and typing","description":"FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.apache.commons.proxy.provider.remoting.RmiProvider (aka apache/commons-proxy).","origin":"UNSPECIFIED","severity":"HIGH","published_at":"2020-06-10T21:12:41.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":8.8,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","references":["https://nvd.nist.gov/vuln/detail/CVE-2020-11112","https://github.com/FasterXML/jackson-databind/issues/2666","https://medium.com/@cowtowncoder/on-jackson-cves-dont-panic-here-is-what-you-need-to-know-54cd0d6e8062","https://security.netapp.com/advisory/ntap-20200403-0002/","https://lists.debian.org/debian-lts-announce/2020/04/msg00012.html","https://www.oracle.com/security-alerts/cpujul2020.html","https://www.oracle.com/security-alerts/cpujan2021.html","https://www.oracle.com/security-alerts/cpuoct2020.html","https://www.oracle.com/security-alerts/cpuoct2021.html","https://github.com/advisories/GHSA-58pp-9c76-5625"],"source_kind":"github","identifiers":["GHSA-58pp-9c76-5625","CVE-2020-11112"],"repository_url":"https://github.com/FasterXML/jackson-databind","blast_radius":0.0,"created_at":"2022-12-21T16:13:24.225Z","updated_at":"2026-06-20T04:11:29.552Z","epss_percentage":0.03554,"epss_percentile":0.87824,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTU4cHAtOWM3Ni01NjI1","html_url":"https://advisories.ecosyste.ms/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTU4cHAtOWM3Ni01NjI1","packages":[{"ecosystem":"maven","package_name":"com.fasterxml.jackson.core:jackson-databind","versions":[{"first_patched_version":"2.9.10.4","vulnerable_version_range":"\u003e= 2.9.0, \u003c= 2.9.10.3"}],"purl":null}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTU4cHAtOWM3Ni01NjI1/related_packages","related_advisories":[]},{"uuid":"MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXE5M2gtamM0OS03OGdn","url":"https://github.com/advisories/GHSA-q93h-jc49-78gg","title":"jackson-databind mishandles the interaction between serialization gadgets and typing","description":"FasterXML jackson-databind 2.x before 2.9.10.4, 2.8.11.6, and 2.7.9.7 mishandles the interaction between serialization gadgets and typing, related to `com.ibatis.sqlmap.engine.transaction.jta.JtaTransactionConfig` (aka `ibatis-sqlmap`).","origin":"UNSPECIFIED","severity":"CRITICAL","published_at":"2020-05-15T18:59:10.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":9.8,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","references":["https://nvd.nist.gov/vuln/detail/CVE-2020-9547","https://github.com/FasterXML/jackson-databind/issues/2634","https://lists.apache.org/thread.html/r35d30db00440ef63b791c4b7f7acb036e14d4a23afa2a249cb66c0fd@%3Cissues.zookeeper.apache.org%3E","https://lists.apache.org/thread.html/r742ef70d126548dcf7de5be5779355c9d76a9aec71d7a9ef02c6398a@%3Cnotifications.zookeeper.apache.org%3E","https://lists.apache.org/thread.html/r893a0104e50c1c2559eb9a5812add28ae8c3e5f43712947a9847ec18@%3Cnotifications.zookeeper.apache.org%3E","https://lists.apache.org/thread.html/r9464a40d25c3ba1a55622db72f113eb494a889656962d098c70c5bb1@%3Cdev.zookeeper.apache.org%3E","https://lists.apache.org/thread.html/ra3e90712f2d59f8cef03fa796f5adf163d32b81fe7b95385f21790e6@%3Cnotifications.zookeeper.apache.org%3E","https://lists.apache.org/thread.html/rb6fecb5e96a6d61e175ff49f33f2713798dd05cf03067c169d195596@%3Cissues.zookeeper.apache.org%3E","https://lists.apache.org/thread.html/rd0e958d6d5c5ee16efed73314cd0e445c8dbb4bdcc80fc9d1d6c11fc@%3Cdev.zookeeper.apache.org%3E","https://lists.apache.org/thread.html/rdd49ab9565bec436a896bc00c4b9fc9dce1598e106c318524fbdfec6@%3Cissues.zookeeper.apache.org%3E","https://lists.apache.org/thread.html/redbe4f1e21bf080f637cf9fbec47729750a2f443a919765360337428@%3Cnotifications.zookeeper.apache.org%3E","https://lists.debian.org/debian-lts-announce/2020/03/msg00008.html","https://medium.com/@cowtowncoder/on-jackson-cves-dont-panic-here-is-what-you-need-to-know-54cd0d6e8062","https://lists.apache.org/thread.html/r4accb2e0de9679174efd3d113a059bab71ff3ec53e882790d21c1cc1@%3Cnotifications.zookeeper.apache.org%3E","https://lists.apache.org/thread.html/r98c9b6e4c9e17792e2cd1ec3e4aa20b61a791939046d3f10888176bb@%3Cissues.zookeeper.apache.org%3E","https://lists.apache.org/thread.html/rc0d5d0f72da1ed6fc5e438b1ddb3fa090c73006b55f873cf845375ab@%3Cnotifications.zookeeper.apache.org%3E","https://lists.apache.org/thread.html/rd5a4457be4623038c3989294429bc063eec433a2e55995d81591e2ca@%3Cissues.zookeeper.apache.org%3E","https://lists.apache.org/thread.html/rdd4df698d5d8e635144d2994922bf0842e933809eae259521f3b5097@%3Cissues.zookeeper.apache.org%3E","https://www.oracle.com/security-alerts/cpujul2020.html","https://lists.apache.org/thread.html/rf1bbc0ea4a9f014cf94df9a12a6477d24a27f52741dbc87f2fd52ff2@%3Cissues.geode.apache.org%3E","https://security.netapp.com/advisory/ntap-20200904-0006/","https://www.oracle.com/security-alerts/cpujan2021.html","https://www.oracle.com/security-alerts/cpuoct2020.html","https://www.oracle.com/security-alerts/cpuoct2021.html","https://github.com/FasterXML/jackson-databind/commit/9f4e97019fb0dd836533d0b6198c88787e235ae2","https://github.com/advisories/GHSA-q93h-jc49-78gg"],"source_kind":"github","identifiers":["GHSA-q93h-jc49-78gg","CVE-2020-9547"],"repository_url":"https://github.com/FasterXML/jackson-databind","blast_radius":0.0,"created_at":"2022-12-21T16:13:25.194Z","updated_at":"2026-06-20T04:07:55.690Z","epss_percentage":0.18671,"epss_percentile":0.96902,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXE5M2gtamM0OS03OGdn","html_url":"https://advisories.ecosyste.ms/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXE5M2gtamM0OS03OGdn","packages":[{"ecosystem":"maven","package_name":"com.fasterxml.jackson.core:jackson-databind","versions":[{"first_patched_version":"2.7.9.7","vulnerable_version_range":"\u003e= 2.0.0, \u003c 2.7.9.7"},{"first_patched_version":"2.8.11.6","vulnerable_version_range":"\u003e= 2.8.0, \u003c 2.8.11.6"},{"first_patched_version":"2.9.10.4","vulnerable_version_range":"\u003e= 2.9.0, \u003c 2.9.10.4"}],"purl":null}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXE5M2gtamM0OS03OGdn/related_packages","related_advisories":[]},{"uuid":"MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXFtcWMteDNyNC02djM5","url":"https://github.com/advisories/GHSA-qmqc-x3r4-6v39","title":"Polymorphic deserialization of malicious object in jackson-databind","description":"A flaw was discovered in FasterXML jackson-databind in all versions before 2.9.10 and 2.10.0, where it would permit polymorphic deserialization of malicious objects using the xalan JNDI gadget when used in conjunction with polymorphic type handling methods such as `enableDefaultTyping()` or when @JsonTypeInfo is using `Id.CLASS` or `Id.MINIMAL_CLASS` or in any other way which ObjectMapper.readValue might instantiate objects from unsafe sources. An attacker could use this flaw to execute arbitrary code.","origin":"UNSPECIFIED","severity":"HIGH","published_at":"2020-05-15T18:59:07.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":0.0,"cvss_vector":null,"references":["https://nvd.nist.gov/vuln/detail/CVE-2019-14893","https://github.com/FasterXML/jackson-databind/issues/2469","https://github.com/FasterXML/jackson-databind/commit/998efd708284778f29d83d7962a9bd935c228317","https://access.redhat.com/errata/RHSA-2020:0729","https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-14893","https://security.netapp.com/advisory/ntap-20200327-0006/","https://www.oracle.com/security-alerts/cpujul2020.html","https://lists.apache.org/thread.html/r1b103833cb5bc8466e24ff0ecc5e75b45a705334ab6a444e64e840a0@%3Cissues.bookkeeper.apache.org%3E","https://lists.apache.org/thread.html/rf1bbc0ea4a9f014cf94df9a12a6477d24a27f52741dbc87f2fd52ff2@%3Cissues.geode.apache.org%3E","https://www.oracle.com/security-alerts/cpuoct2020.html","https://github.com/advisories/GHSA-qmqc-x3r4-6v39"],"source_kind":"github","identifiers":["GHSA-qmqc-x3r4-6v39","CVE-2019-14893"],"repository_url":"https://github.com/FasterXML/jackson-databind","blast_radius":0.0,"created_at":"2022-12-21T16:13:25.205Z","updated_at":"2026-06-20T04:11:30.743Z","epss_percentage":0.03958,"epss_percentile":0.89097,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXFtcWMteDNyNC02djM5","html_url":"https://advisories.ecosyste.ms/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXFtcWMteDNyNC02djM5","packages":[{"ecosystem":"maven","package_name":"com.fasterxml.jackson.core:jackson-databind","versions":[{"first_patched_version":"2.9.10","vulnerable_version_range":"\u003e= 2.9.0, \u003c 2.9.10"}],"purl":null}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXFtcWMteDNyNC02djM5/related_packages","related_advisories":[]},{"uuid":"MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWZxd2YtcGp3Zi03dnF2","url":"https://github.com/advisories/GHSA-fqwf-pjwf-7vqv","title":"jackson-databind mishandles the interaction between serialization gadgets and typing","description":"FasterXML jackson-databind 2.x before 2.9.10.4 and 2.6.7.4 mishandles the interaction between serialization gadgets and typing, related to com.caucho.config.types.ResourceRef (aka caucho-quercus).","origin":"UNSPECIFIED","severity":"HIGH","published_at":"2020-05-15T18:59:04.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":8.8,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","references":["https://nvd.nist.gov/vuln/detail/CVE-2020-10673","https://github.com/FasterXML/jackson-databind/issues/2660","https://lists.debian.org/debian-lts-announce/2020/03/msg00027.html","https://medium.com/@cowtowncoder/on-jackson-cves-dont-panic-here-is-what-you-need-to-know-54cd0d6e8062","https://www.oracle.com/security-alerts/cpujul2020.html","https://www.oracle.com/security-alerts/cpujan2021.html","https://www.oracle.com/security-alerts/cpuoct2020.html","https://www.oracle.com/security-alerts/cpuoct2021.html","https://github.com/FasterXML/jackson-databind/commit/1645efbd392989cf015f459a91c999e59c921b15","https://medium.com/%40cowtowncoder/on-jackson-cves-dont-panic-here-is-what-you-need-to-know-54cd0d6e8062","https://security.netapp.com/advisory/ntap-20200403-0002","https://github.com/advisories/GHSA-fqwf-pjwf-7vqv"],"source_kind":"github","identifiers":["GHSA-fqwf-pjwf-7vqv","CVE-2020-10673"],"repository_url":"https://github.com/FasterXML/jackson-databind","blast_radius":0.0,"created_at":"2022-12-21T16:13:25.214Z","updated_at":"2026-06-20T04:07:55.689Z","epss_percentage":0.07963,"epss_percentile":0.94003,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWZxd2YtcGp3Zi03dnF2","html_url":"https://advisories.ecosyste.ms/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWZxd2YtcGp3Zi03dnF2","packages":[{"ecosystem":"maven","package_name":"com.fasterxml.jackson.core:jackson-databind","versions":[{"first_patched_version":"2.6.7.4","vulnerable_version_range":"\u003e= 2.0.0, \u003c 2.6.7.4"},{"first_patched_version":"2.9.10.4","vulnerable_version_range":"\u003e= 2.7.0, \u003c 2.9.10.4"}],"purl":null}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWZxd2YtcGp3Zi03dnF2/related_packages","related_advisories":[]},{"uuid":"MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXA0M3gteGZqZi01amhy","url":"https://github.com/advisories/GHSA-p43x-xfjf-5jhr","title":"jackson-databind mishandles the interaction between serialization gadgets and typing","description":"FasterXML jackson-databind 2.x before 2.9.10.4, 2.8.11.6, and 2.7.9.7 mishandles the interaction between serialization gadgets and typing, related to br.com.anteros.dbcp.AnterosDBCPConfig (aka anteros-core).","origin":"UNSPECIFIED","severity":"CRITICAL","published_at":"2020-05-15T18:59:01.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":9.8,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","references":["https://nvd.nist.gov/vuln/detail/CVE-2020-9548","https://github.com/FasterXML/jackson-databind/issues/2634","https://lists.apache.org/thread.html/r35d30db00440ef63b791c4b7f7acb036e14d4a23afa2a249cb66c0fd@%3Cissues.zookeeper.apache.org%3E","https://lists.apache.org/thread.html/r9464a40d25c3ba1a55622db72f113eb494a889656962d098c70c5bb1@%3Cdev.zookeeper.apache.org%3E","https://lists.apache.org/thread.html/rb6fecb5e96a6d61e175ff49f33f2713798dd05cf03067c169d195596@%3Cissues.zookeeper.apache.org%3E","https://lists.apache.org/thread.html/rdd49ab9565bec436a896bc00c4b9fc9dce1598e106c318524fbdfec6@%3Cissues.zookeeper.apache.org%3E","https://lists.debian.org/debian-lts-announce/2020/03/msg00008.html","https://medium.com/@cowtowncoder/on-jackson-cves-dont-panic-here-is-what-you-need-to-know-54cd0d6e8062","https://lists.apache.org/thread.html/r98c9b6e4c9e17792e2cd1ec3e4aa20b61a791939046d3f10888176bb@%3Cissues.zookeeper.apache.org%3E","https://lists.apache.org/thread.html/rd5a4457be4623038c3989294429bc063eec433a2e55995d81591e2ca@%3Cissues.zookeeper.apache.org%3E","https://lists.apache.org/thread.html/rdd4df698d5d8e635144d2994922bf0842e933809eae259521f3b5097@%3Cissues.zookeeper.apache.org%3E","https://www.oracle.com/security-alerts/cpujul2020.html","https://lists.apache.org/thread.html/rf1bbc0ea4a9f014cf94df9a12a6477d24a27f52741dbc87f2fd52ff2@%3Cissues.geode.apache.org%3E","https://www.oracle.com/security-alerts/cpujan2021.html","https://www.oracle.com/security-alerts/cpuoct2020.html","https://www.oracle.com/security-alerts/cpuoct2021.html","https://github.com/FasterXML/jackson-databind/commit/9f4e97019fb0dd836533d0b6198c88787e235ae2","https://github.com/FasterXML/jackson-databind/commit/1e64db6a2fad331f96c7363fda3bc5f3dffa25bb","https://security.netapp.com/advisory/ntap-20200904-0006","https://github.com/advisories/GHSA-p43x-xfjf-5jhr"],"source_kind":"github","identifiers":["GHSA-p43x-xfjf-5jhr","CVE-2020-9548"],"repository_url":"https://github.com/FasterXML/jackson-databind","blast_radius":0.0,"created_at":"2022-12-21T16:13:25.166Z","updated_at":"2026-06-20T04:07:55.689Z","epss_percentage":0.18345,"epss_percentile":0.96863,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXA0M3gteGZqZi01amhy","html_url":"https://advisories.ecosyste.ms/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXA0M3gteGZqZi01amhy","packages":[{"ecosystem":"maven","package_name":"com.fasterxml.jackson.core:jackson-databind","versions":[{"first_patched_version":"2.7.9.7","vulnerable_version_range":"\u003e= 2.0.0, \u003c 2.7.9.7"},{"first_patched_version":"2.8.11.6","vulnerable_version_range":"\u003e= 2.8.0, \u003c 2.8.11.6"},{"first_patched_version":"2.9.10.4","vulnerable_version_range":"\u003e= 2.9.0, \u003c 2.9.10.4"}],"purl":null}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXA0M3gteGZqZi01amhy/related_packages","related_advisories":[]},{"uuid":"MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWNmNnItM3dnYy1oODYz","url":"https://github.com/advisories/GHSA-cf6r-3wgc-h863","title":"Polymorphic deserialization of malicious object in jackson-databind","description":"A flaw was discovered in jackson-databind in versions before 2.9.10, 2.8.11.5, and 2.6.7.3, where it would permit polymorphic deserialization of a malicious object using commons-configuration 1 and 2 JNDI classes. An attacker could use this flaw to execute arbitrary code.","origin":"UNSPECIFIED","severity":"HIGH","published_at":"2020-05-15T18:58:58.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":7.5,"cvss_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","references":["https://nvd.nist.gov/vuln/detail/CVE-2019-14892","https://github.com/FasterXML/jackson-databind/issues/2462","https://github.com/FasterXML/jackson-databind/commit/41b7f9b90149e9d44a65a8261a8deedc7186f6af","https://github.com/FasterXML/jackson-databind/commit/819cdbcab51c6da9fb896380f2d46e9b7d4fdc3b","https://access.redhat.com/errata/RHSA-2020:0729","https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-14892","https://lists.apache.org/thread.html/r1b103833cb5bc8466e24ff0ecc5e75b45a705334ab6a444e64e840a0@%3Cissues.bookkeeper.apache.org%3E","https://lists.apache.org/thread.html/rf1bbc0ea4a9f014cf94df9a12a6477d24a27f52741dbc87f2fd52ff2@%3Cissues.geode.apache.org%3E","https://security.netapp.com/advisory/ntap-20200904-0005/","https://github.com/advisories/GHSA-cf6r-3wgc-h863"],"source_kind":"github","identifiers":["GHSA-cf6r-3wgc-h863","CVE-2019-14892"],"repository_url":"https://github.com/FasterXML/jackson-databind","blast_radius":0.0,"created_at":"2022-12-21T16:13:25.137Z","updated_at":"2026-06-20T04:07:55.690Z","epss_percentage":0.0544,"epss_percentile":0.91697,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWNmNnItM3dnYy1oODYz","html_url":"https://advisories.ecosyste.ms/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWNmNnItM3dnYy1oODYz","packages":[{"ecosystem":"maven","package_name":"com.fasterxml.jackson.core:jackson-databind","versions":[{"first_patched_version":"2.8.11.5","vulnerable_version_range":"\u003e= 2.7.0, \u003c= 2.8.11.4"},{"first_patched_version":"2.9.10","vulnerable_version_range":"\u003e= 2.9.0, \u003c 2.9.10"},{"first_patched_version":"2.6.7.3","vulnerable_version_range":"\u003c= 2.6.7.2"}],"purl":null}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWNmNnItM3dnYy1oODYz/related_packages","related_advisories":[]},{"uuid":"MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXJmNnItMmM0cS0ydndn","url":"https://github.com/advisories/GHSA-rf6r-2c4q-2vwg","title":"jackson-databind mishandles the interaction between serialization gadgets and typing","description":"FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.aoju.bus.proxy.provider.remoting.RmiProvider (aka bus-proxy).","origin":"UNSPECIFIED","severity":"HIGH","published_at":"2020-05-15T18:58:54.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":8.8,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","references":["https://nvd.nist.gov/vuln/detail/CVE-2020-10968","https://github.com/FasterXML/jackson-databind/issues/2662","https://medium.com/@cowtowncoder/on-jackson-cves-dont-panic-here-is-what-you-need-to-know-54cd0d6e8062","https://lists.debian.org/debian-lts-announce/2020/04/msg00012.html","https://www.oracle.com/security-alerts/cpujul2020.html","https://www.oracle.com/security-alerts/cpujan2021.html","https://www.oracle.com/security-alerts/cpuoct2020.html","https://www.oracle.com/security-alerts/cpuoct2021.html","https://github.com/FasterXML/jackson-databind/commit/05d7e0e13f43e12db6a51726df12c8b4d8040676","https://github.com/FasterXML/jackson-databind/commit/08fbfacf89a4a4c026a6227a1b470ab7a13e2e88","https://security.netapp.com/advisory/ntap-20200403-0002","https://github.com/advisories/GHSA-rf6r-2c4q-2vwg"],"source_kind":"github","identifiers":["GHSA-rf6r-2c4q-2vwg","CVE-2020-10968"],"repository_url":"https://github.com/FasterXML/jackson-databind","blast_radius":0.0,"created_at":"2022-12-21T16:13:25.121Z","updated_at":"2026-06-20T04:06:15.703Z","epss_percentage":0.03538,"epss_percentile":0.87776,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXJmNnItMmM0cS0ydndn","html_url":"https://advisories.ecosyste.ms/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXJmNnItMmM0cS0ydndn","packages":[{"ecosystem":"maven","package_name":"com.fasterxml.jackson.core:jackson-databind","versions":[{"first_patched_version":"2.9.10.4","vulnerable_version_range":"\u003e= 2.9.0, \u003c= 2.9.10.3"}],"purl":null}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXJmNnItMmM0cS0ydndn/related_packages","related_advisories":[]},{"uuid":"MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXYzeHctYzk2My1mNWhj","url":"https://github.com/advisories/GHSA-v3xw-c963-f5hc","title":"jackson-databind mishandles the interaction between serialization gadgets and typing","description":"FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.apache.activemq.* (aka activemq-jms, activemq-core, activemq-pool, and activemq-pool-jms).","origin":"UNSPECIFIED","severity":"HIGH","published_at":"2020-05-15T18:58:50.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":8.8,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","references":["https://nvd.nist.gov/vuln/detail/CVE-2020-11111","https://github.com/FasterXML/jackson-databind/issues/2664","https://medium.com/@cowtowncoder/on-jackson-cves-dont-panic-here-is-what-you-need-to-know-54cd0d6e8062","https://security.netapp.com/advisory/ntap-20200403-0002/","https://lists.debian.org/debian-lts-announce/2020/04/msg00012.html","https://www.oracle.com/security-alerts/cpujul2020.html","https://www.oracle.com/security-alerts/cpujan2021.html","https://www.oracle.com/security-alerts/cpuoct2020.html","https://www.oracle.com/security-alerts/cpuoct2021.html","https://github.com/advisories/GHSA-v3xw-c963-f5hc"],"source_kind":"github","identifiers":["GHSA-v3xw-c963-f5hc","CVE-2020-11111"],"repository_url":"https://github.com/FasterXML/jackson-databind","blast_radius":0.0,"created_at":"2022-12-21T16:13:25.112Z","updated_at":"2026-06-20T04:11:30.742Z","epss_percentage":0.03489,"epss_percentile":0.87619,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXYzeHctYzk2My1mNWhj","html_url":"https://advisories.ecosyste.ms/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXYzeHctYzk2My1mNWhj","packages":[{"ecosystem":"maven","package_name":"com.fasterxml.jackson.core:jackson-databind","versions":[{"first_patched_version":"2.9.10.4","vulnerable_version_range":"\u003e= 2.9.0, \u003c= 2.9.10.3"}],"purl":null}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXYzeHctYzk2My1mNWhj/related_packages","related_advisories":[]},{"uuid":"MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTl2dnAtZnh3Ni1qY3hy","url":"https://github.com/advisories/GHSA-9vvp-fxw6-jcxr","title":"jackson-databind mishandles the interaction between serialization gadgets and typing","description":"FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.apache.openjpa.ee.WASRegistryManagedRuntime (aka openjpa).","origin":"UNSPECIFIED","severity":"HIGH","published_at":"2020-05-15T18:58:47.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":8.8,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","references":["https://nvd.nist.gov/vuln/detail/CVE-2020-11113","https://github.com/FasterXML/jackson-databind/issues/2670","https://medium.com/@cowtowncoder/on-jackson-cves-dont-panic-here-is-what-you-need-to-know-54cd0d6e8062","https://lists.debian.org/debian-lts-announce/2020/04/msg00012.html","https://www.oracle.com/security-alerts/cpujul2020.html","https://www.oracle.com/security-alerts/cpujan2021.html","https://www.oracle.com/security-alerts/cpuoct2020.html","https://www.oracle.com/security-alerts/cpuoct2021.html","https://github.com/FasterXML/jackson-databind/commit/08fbfacf89a4a4c026a6227a1b470ab7a13e2e88","https://github.com/FasterXML/jackson-databind/commit/e2ba12d5d60715d95105e3e790fc234cfb59893d","https://security.netapp.com/advisory/ntap-20200403-0002","https://github.com/advisories/GHSA-9vvp-fxw6-jcxr"],"source_kind":"github","identifiers":["GHSA-9vvp-fxw6-jcxr","CVE-2020-11113"],"repository_url":"https://github.com/FasterXML/jackson-databind","blast_radius":0.0,"created_at":"2022-12-21T16:13:25.103Z","updated_at":"2026-06-20T04:06:15.703Z","epss_percentage":0.06227,"epss_percentile":0.9263,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTl2dnAtZnh3Ni1qY3hy","html_url":"https://advisories.ecosyste.ms/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTl2dnAtZnh3Ni1qY3hy","packages":[{"ecosystem":"maven","package_name":"com.fasterxml.jackson.core:jackson-databind","versions":[{"first_patched_version":"2.9.10.4","vulnerable_version_range":"\u003e= 2.9.0, \u003c= 2.9.10.3"}],"purl":null}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTl2dnAtZnh3Ni1qY3hy/related_packages","related_advisories":[]},{"uuid":"MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTI3eGotcnF4NS0yMjU1","url":"https://github.com/advisories/GHSA-27xj-rqx5-2255","title":"jackson-databind mishandles the interaction between serialization gadgets and typing","description":"FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.springframework.aop.config.MethodLocatingFactoryBean (aka spring-aop).","origin":"UNSPECIFIED","severity":"HIGH","published_at":"2020-05-15T18:58:44.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":8.1,"cvss_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","references":["https://nvd.nist.gov/vuln/detail/CVE-2020-11619","https://github.com/FasterXML/jackson-databind/issues/2680","https://lists.debian.org/debian-lts-announce/2020/04/msg00012.html","https://medium.com/@cowtowncoder/on-jackson-cves-dont-panic-here-is-what-you-need-to-know-54cd0d6e8062","https://www.oracle.com/security-alerts/cpujul2020.html","https://lists.apache.org/thread.html/rf1bbc0ea4a9f014cf94df9a12a6477d24a27f52741dbc87f2fd52ff2@%3Cissues.geode.apache.org%3E","https://www.oracle.com/security-alerts/cpujan2021.html","https://www.oracle.com/security-alerts/cpuoct2020.html","https://lists.apache.org/thread.html/rf1bbc0ea4a9f014cf94df9a12a6477d24a27f52741dbc87f2fd52ff2%40%3Cissues.geode.apache.org%3E","https://medium.com/%40cowtowncoder/on-jackson-cves-dont-panic-here-is-what-you-need-to-know-54cd0d6e8062","https://security.netapp.com/advisory/ntap-20200511-0004","https://github.com/advisories/GHSA-27xj-rqx5-2255"],"source_kind":"github","identifiers":["GHSA-27xj-rqx5-2255","CVE-2020-11619"],"repository_url":"https://github.com/FasterXML/jackson-databind","blast_radius":0.0,"created_at":"2022-12-21T16:13:25.093Z","updated_at":"2026-06-20T04:11:30.741Z","epss_percentage":0.03577,"epss_percentile":0.87901,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTI3eGotcnF4NS0yMjU1","html_url":"https://advisories.ecosyste.ms/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTI3eGotcnF4NS0yMjU1","packages":[{"ecosystem":"maven","package_name":"com.fasterxml.jackson.core:jackson-databind","versions":[{"first_patched_version":"2.9.10.4","vulnerable_version_range":"\u003e= 2.9.0, \u003c= 2.9.10.3"}],"purl":null}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTI3eGotcnF4NS0yMjU1/related_packages","related_advisories":[]},{"uuid":"MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTc1OG0tdjU2di1ncmo0","url":"https://github.com/advisories/GHSA-758m-v56v-grj4","title":"jackson-databind mishandles the interaction between serialization gadgets and typing","description":"FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to javax.swing.JEditorPane.","origin":"UNSPECIFIED","severity":"HIGH","published_at":"2020-04-23T21:36:03.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":8.8,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","references":["https://nvd.nist.gov/vuln/detail/CVE-2020-10969","https://github.com/FasterXML/jackson-databind/issues/2642","https://medium.com/@cowtowncoder/on-jackson-cves-dont-panic-here-is-what-you-need-to-know-54cd0d6e8062","https://lists.debian.org/debian-lts-announce/2020/04/msg00012.html","https://www.oracle.com/security-alerts/cpujul2020.html","https://www.oracle.com/security-alerts/cpujan2021.html","https://www.oracle.com/security-alerts/cpuoct2020.html","https://www.oracle.com/security-alerts/cpuoct2021.html","https://github.com/FasterXML/jackson-databind/commit/6ba48457984943df0de92c54144f7dcae01b1221","https://security.netapp.com/advisory/ntap-20200403-0002","https://github.com/advisories/GHSA-758m-v56v-grj4"],"source_kind":"github","identifiers":["GHSA-758m-v56v-grj4","CVE-2020-10969"],"repository_url":"https://github.com/FasterXML/jackson-databind","blast_radius":0.0,"created_at":"2022-12-21T16:13:25.146Z","updated_at":"2026-06-20T04:05:21.823Z","epss_percentage":0.03473,"epss_percentile":0.87559,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTc1OG0tdjU2di1ncmo0","html_url":"https://advisories.ecosyste.ms/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTc1OG0tdjU2di1ncmo0","packages":[{"ecosystem":"maven","package_name":"com.fasterxml.jackson.core:jackson-databind","versions":[{"first_patched_version":"2.9.10.4","vulnerable_version_range":"\u003e= 2.9.0, \u003c= 2.9.10.3"}],"purl":null}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTc1OG0tdjU2di1ncmo0/related_packages","related_advisories":[]},{"uuid":"MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTVwMzQtNW02cC1wNThn","url":"https://github.com/advisories/GHSA-5p34-5m6p-p58g","title":"jackson-databind mishandles the interaction between serialization gadgets and typing","description":"FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.apache.hadoop.shaded.com.zaxxer.hikari.HikariConfig (aka shaded hikari-config).","origin":"UNSPECIFIED","severity":"CRITICAL","published_at":"2020-04-23T21:08:40.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":9.8,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","references":["https://nvd.nist.gov/vuln/detail/CVE-2020-9546","https://github.com/FasterXML/jackson-databind/issues/2631","https://lists.apache.org/thread.html/r35d30db00440ef63b791c4b7f7acb036e14d4a23afa2a249cb66c0fd@%3Cissues.zookeeper.apache.org%3E","https://lists.apache.org/thread.html/r893a0104e50c1c2559eb9a5812add28ae8c3e5f43712947a9847ec18@%3Cnotifications.zookeeper.apache.org%3E","https://lists.apache.org/thread.html/r9464a40d25c3ba1a55622db72f113eb494a889656962d098c70c5bb1@%3Cdev.zookeeper.apache.org%3E","https://lists.apache.org/thread.html/rb6fecb5e96a6d61e175ff49f33f2713798dd05cf03067c169d195596@%3Cissues.zookeeper.apache.org%3E","https://lists.apache.org/thread.html/rdd49ab9565bec436a896bc00c4b9fc9dce1598e106c318524fbdfec6@%3Cissues.zookeeper.apache.org%3E","https://lists.debian.org/debian-lts-announce/2020/03/msg00008.html","https://medium.com/@cowtowncoder/on-jackson-cves-dont-panic-here-is-what-you-need-to-know-54cd0d6e8062","https://lists.apache.org/thread.html/r98c9b6e4c9e17792e2cd1ec3e4aa20b61a791939046d3f10888176bb@%3Cissues.zookeeper.apache.org%3E","https://lists.apache.org/thread.html/rd5a4457be4623038c3989294429bc063eec433a2e55995d81591e2ca@%3Cissues.zookeeper.apache.org%3E","https://lists.apache.org/thread.html/rdd4df698d5d8e635144d2994922bf0842e933809eae259521f3b5097@%3Cissues.zookeeper.apache.org%3E","https://www.oracle.com/security-alerts/cpujul2020.html","https://lists.apache.org/thread.html/rf1bbc0ea4a9f014cf94df9a12a6477d24a27f52741dbc87f2fd52ff2@%3Cissues.geode.apache.org%3E","https://www.oracle.com/security-alerts/cpujan2021.html","https://www.oracle.com/security-alerts/cpuoct2020.html","https://www.oracle.com/security-alerts/cpuoct2021.html","https://security.netapp.com/advisory/ntap-20200904-0006","https://medium.com/%40cowtowncoder/on-jackson-cves-dont-panic-here-is-what-you-need-to-know-54cd0d6e8062","https://lists.apache.org/thread.html/rf1bbc0ea4a9f014cf94df9a12a6477d24a27f52741dbc87f2fd52ff2%40%3Cissues.geode.apache.org%3E","https://lists.apache.org/thread.html/rdd4df698d5d8e635144d2994922bf0842e933809eae259521f3b5097%40%3Cissues.zookeeper.apache.org%3E","https://lists.apache.org/thread.html/rdd49ab9565bec436a896bc00c4b9fc9dce1598e106c318524fbdfec6%40%3Cissues.zookeeper.apache.org%3E","https://lists.apache.org/thread.html/rd5a4457be4623038c3989294429bc063eec433a2e55995d81591e2ca%40%3Cissues.zookeeper.apache.org%3E","https://lists.apache.org/thread.html/rb6fecb5e96a6d61e175ff49f33f2713798dd05cf03067c169d195596%40%3Cissues.zookeeper.apache.org%3E","https://lists.apache.org/thread.html/r98c9b6e4c9e17792e2cd1ec3e4aa20b61a791939046d3f10888176bb%40%3Cissues.zookeeper.apache.org%3E","https://lists.apache.org/thread.html/r9464a40d25c3ba1a55622db72f113eb494a889656962d098c70c5bb1%40%3Cdev.zookeeper.apache.org%3E","https://lists.apache.org/thread.html/r893a0104e50c1c2559eb9a5812add28ae8c3e5f43712947a9847ec18%40%3Cnotifications.zookeeper.apache.org%3E","https://lists.apache.org/thread.html/r35d30db00440ef63b791c4b7f7acb036e14d4a23afa2a249cb66c0fd%40%3Cissues.zookeeper.apache.org%3E","https://github.com/advisories/GHSA-5p34-5m6p-p58g"],"source_kind":"github","identifiers":["GHSA-5p34-5m6p-p58g","CVE-2020-9546"],"repository_url":"https://github.com/FasterXML/jackson-databind","blast_radius":0.0,"created_at":"2022-12-21T16:13:25.156Z","updated_at":"2026-06-20T04:11:30.742Z","epss_percentage":0.04575,"epss_percentile":0.90408,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTVwMzQtNW02cC1wNThn","html_url":"https://advisories.ecosyste.ms/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTVwMzQtNW02cC1wNThn","packages":[{"ecosystem":"maven","package_name":"com.fasterxml.jackson.core:jackson-databind","versions":[{"first_patched_version":"2.9.10.4","vulnerable_version_range":"\u003e= 2.9.0, \u003c= 2.9.10.3"}],"purl":null}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTVwMzQtNW02cC1wNThn/related_packages","related_advisories":[]},{"uuid":"MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWg0cmMtMzg2Zy02bTg1","url":"https://github.com/advisories/GHSA-h4rc-386g-6m85","title":"jackson-databind mishandles the interaction between serialization gadgets and typing","description":"FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.apache.commons.jelly.impl.Embedded (aka commons-jelly).","origin":"UNSPECIFIED","severity":"HIGH","published_at":"2020-04-23T20:19:02.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":8.1,"cvss_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","references":["https://nvd.nist.gov/vuln/detail/CVE-2020-11620","https://github.com/FasterXML/jackson-databind/issues/2682","https://lists.debian.org/debian-lts-announce/2020/04/msg00012.html","https://medium.com/@cowtowncoder/on-jackson-cves-dont-panic-here-is-what-you-need-to-know-54cd0d6e8062","https://www.oracle.com/security-alerts/cpujul2020.html","https://lists.apache.org/thread.html/rf1bbc0ea4a9f014cf94df9a12a6477d24a27f52741dbc87f2fd52ff2@%3Cissues.geode.apache.org%3E","https://www.oracle.com/security-alerts/cpujan2021.html","https://www.oracle.com/security-alerts/cpuoct2020.html","https://github.com/FasterXML/jackson-databind/commit/08fbfacf89a4a4c026a6227a1b470ab7a13e2e88","https://github.com/FasterXML/jackson-databind/commit/77040d85e3eb6710508e6445640ae1a3d5e60c22","https://security.netapp.com/advisory/ntap-20200511-0004","https://github.com/advisories/GHSA-h4rc-386g-6m85"],"source_kind":"github","identifiers":["GHSA-h4rc-386g-6m85","CVE-2020-11620"],"repository_url":"https://github.com/FasterXML/jackson-databind","blast_radius":0.0,"created_at":"2022-12-21T16:13:25.176Z","updated_at":"2026-06-20T04:06:15.704Z","epss_percentage":0.05594,"epss_percentile":0.91909,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWg0cmMtMzg2Zy02bTg1","html_url":"https://advisories.ecosyste.ms/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWg0cmMtMzg2Zy02bTg1","packages":[{"ecosystem":"maven","package_name":"com.fasterxml.jackson.core:jackson-databind","versions":[{"first_patched_version":"2.9.10.4","vulnerable_version_range":"\u003e= 2.9.0, \u003c= 2.9.10.3"}],"purl":null}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWg0cmMtMzg2Zy02bTg1/related_packages","related_advisories":[]},{"uuid":"MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTk1Y20tODhmNS1mMmM3","url":"https://github.com/advisories/GHSA-95cm-88f5-f2c7","title":"jackson-databind mishandles the interaction between serialization gadgets and typing","description":"FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.apache.aries.transaction.jms.internal.XaPooledConnectionFactory (aka aries.transaction.jms).","origin":"UNSPECIFIED","severity":"HIGH","published_at":"2020-04-23T16:32:59.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":8.8,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","references":["https://nvd.nist.gov/vuln/detail/CVE-2020-10672","https://github.com/FasterXML/jackson-databind/issues/2659","https://lists.debian.org/debian-lts-announce/2020/03/msg00027.html","https://medium.com/@cowtowncoder/on-jackson-cves-dont-panic-here-is-what-you-need-to-know-54cd0d6e8062","https://www.oracle.com/security-alerts/cpujul2020.html","https://www.oracle.com/security-alerts/cpujan2021.html","https://www.oracle.com/security-alerts/cpuoct2020.html","https://www.oracle.com/security-alerts/cpuoct2021.html","https://github.com/FasterXML/jackson-databind/commit/08fbfacf89a4a4c026a6227a1b470ab7a13e2e88","https://github.com/FasterXML/jackson-databind/commit/592872f4235c7f2a3280725278da55544032f72d","https://security.netapp.com/advisory/ntap-20200403-0002","https://medium.com/%40cowtowncoder/on-jackson-cves-dont-panic-here-is-what-you-need-to-know-54cd0d6e8062","https://github.com/advisories/GHSA-95cm-88f5-f2c7"],"source_kind":"github","identifiers":["GHSA-95cm-88f5-f2c7","CVE-2020-10672"],"repository_url":"https://github.com/FasterXML/jackson-databind","blast_radius":0.0,"created_at":"2022-12-21T16:13:25.185Z","updated_at":"2026-06-20T04:06:15.703Z","epss_percentage":0.02959,"epss_percentile":0.85422,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTk1Y20tODhmNS1mMmM3","html_url":"https://advisories.ecosyste.ms/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTk1Y20tODhmNS1mMmM3","packages":[{"ecosystem":"maven","package_name":"com.fasterxml.jackson.core:jackson-databind","versions":[{"first_patched_version":"2.9.10.4","vulnerable_version_range":"\u003e= 2.9.0, \u003c= 2.9.10.3"}],"purl":null}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTk1Y20tODhmNS1mMmM3/related_packages","related_advisories":[]},{"uuid":"MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTR3ODItcjMyOS0zcTY3","url":"https://github.com/advisories/GHSA-4w82-r329-3q67","title":"Deserialization of Untrusted Data in jackson-databind","description":"FasterXML jackson-databind 2.x before 2.6.7.4, 2.7.x before 2.7.9.7, 2.8.x before 2.8.11.5 and 2.9.x before 2.9.10.2 lacks certain xbean-reflect/JNDI blocking, as demonstrated by org.apache.xbean.propertyeditor.JndiConverter.","origin":"UNSPECIFIED","severity":"CRITICAL","published_at":"2020-03-04T20:52:14.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":9.8,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","references":["https://nvd.nist.gov/vuln/detail/CVE-2020-8840","https://github.com/FasterXML/jackson-databind/issues/2620","https://github.com/FasterXML/jackson-databind/commit/914e7c9f2cb8ce66724bf26a72adc7e958992497","https://lists.apache.org/thread.html/r078e68a926ea6be12e8404e47f45aabf04bb4668e8265c0de41db6db@%3Ccommits.druid.apache.org%3E","https://lists.apache.org/thread.html/r319f19c74e06c201b9d4e8b282a4e4b2da6dcda022fb46f007dd00d3@%3Ccommits.druid.apache.org%3E","https://lists.apache.org/thread.html/r3539bd3a377991217d724879d239e16e86001c54160076408574e1da@%3Cnotifications.zookeeper.apache.org%3E","https://lists.apache.org/thread.html/r3d20a2660b36551fd8257d479941782af4a7169582449fac1704bde2@%3Ccommits.druid.apache.org%3E","https://lists.apache.org/thread.html/r428d068b2a4923f1a5a4f5fc6381b95205cfe7620169d16db78e9c71@%3Cnotifications.zookeeper.apache.org%3E","https://lists.apache.org/thread.html/r46bebdeb59b8b7212d63a010ca445a9f5c4e9d64dcf693cab6f399d3@%3Ccommits.zookeeper.apache.org%3E","https://lists.apache.org/thread.html/r6fdd4c61a09a0c89f581b4ddb3dc6f154ab0c705fcfd0a7358b2e4e5@%3Cissues.zookeeper.apache.org%3E","https://lists.apache.org/thread.html/r8170007fd9b263d65b37d92a7b5d7bc357aedbb113a32838bc4a9485@%3Cissues.zookeeper.apache.org%3E","https://lists.apache.org/thread.html/r9ecf211c22760b00967ebe158c6ed7dba9142078e2a630ab8904a5b7@%3Cdev.zookeeper.apache.org%3E","https://lists.apache.org/thread.html/rac5ee5d686818be7e7c430d35108ee01a88aae54f832d32f62431fd1@%3Cnotifications.zookeeper.apache.org%3E","https://lists.apache.org/thread.html/rb43f9a65150948a6bebd3cb77ee3e105d40db2820fd547528f4e7f89@%3Cissues.zookeeper.apache.org%3E","https://lists.apache.org/thread.html/rb5eedf90ba3633e171a2ffdfe484651c9490dc5df74c8a29244cbc0e@%3Ccommits.zookeeper.apache.org%3E","https://lists.apache.org/thread.html/rdf8d389271a291dde3b2f99c36918d6cb1e796958af626cc140fee23@%3Ccommits.zookeeper.apache.org%3E","https://lists.apache.org/thread.html/re7326b8655eab931f2a9ce074fd9a1a51b5db11456bee9b48e1e170c@%3Cissues.zookeeper.apache.org%3E","https://lists.apache.org/thread.html/re8ae2670ec456ef1c5a2a661a2838ab2cd00e9efa1e88c069f546f21@%3Ccommits.zookeeper.apache.org%3E","https://lists.debian.org/debian-lts-announce/2020/02/msg00020.html","https://lists.apache.org/thread.html/r65ee95fa09c831843bac81eaa582fdddc2b6119912a72d1c83a9b882@%3Cissues.zookeeper.apache.org%3E","https://lists.apache.org/thread.html/r1c09b9551f6953dbeca190a4c4b78198cdbb9825fce36f96fe3d8218@%3Cdev.tomee.apache.org%3E","https://lists.apache.org/thread.html/r1efc776fc6ce3387593deaa94bbdd296733b1b01408a39c8d1ab9e0e@%3Cdev.ranger.apache.org%3E","https://lists.apache.org/thread.html/r2fa8046bd47fb407ca09b5107a80fa6147ba4ebe879caae5c98b7657@%3Cdev.ranger.apache.org%3E","https://lists.apache.org/thread.html/r446646c5588b10f5e02409ad580b12f314869009cdfbf844ca395cec@%3Cdev.ranger.apache.org%3E","https://lists.apache.org/thread.html/r5d8bea8e9d17b6efcf4a0e4e194e91ef46a99f505777a31a60da2b38@%3Cdev.ranger.apache.org%3E","https://lists.apache.org/thread.html/r7762d69e85c58d6948823424017ef4c08f47de077644277fa18cc116@%3Cdev.ranger.apache.org%3E","https://lists.apache.org/thread.html/r7e5c10534ed06bf805473ac85e8412fe3908a8fa4cabf5027bf11220@%3Cdev.kafka.apache.org%3E","https://lists.apache.org/thread.html/r8e96c340004b7898cad3204ea51280ef6e4b553a684e1452bf1b18b1@%3Cjira.kafka.apache.org%3E","https://lists.apache.org/thread.html/r94930e39b60fff236160c1c4110fe884dc093044b067aa5fc98d7ee1@%3Cdev.ranger.apache.org%3E","https://lists.apache.org/thread.html/r9e59ebaf76fd00b2fa3ff5ebf18fe075ca9f4376216612c696f76718@%3Cdev.ranger.apache.org%3E","https://lists.apache.org/thread.html/ra275f29615f35d5b40106d1582a41e5388b2a5131564e9e01a572987@%3Cdev.ranger.apache.org%3E","https://lists.apache.org/thread.html/rb73708bf714ed6dbc1212da082e7703e586077f0c92f3940b2e82caf@%3Cdev.ranger.apache.org%3E","https://lists.apache.org/thread.html/rb99c7321eba5d4c907beec46675d52827528b738cfafd48eb4d862f1@%3Cdev.tomee.apache.org%3E","https://lists.apache.org/thread.html/rc068e824654c4b8bd4f2490bec869e29edbfcd5dfe02d47cbf7433b2@%3Cdev.tomee.apache.org%3E","https://lists.apache.org/thread.html/rc717fd6c65190f4e592345713f9ef0723fb7d71f624caa2a17caa26a@%3Cdev.ranger.apache.org%3E","https://lists.apache.org/thread.html/rcc72b497e3dff2dc62ec9b89ceb90bc4e1b14fc56c3c252a6fcbb013@%3Cdev.ranger.apache.org%3E","https://lists.apache.org/thread.html/rdea588d4a0ebf9cb7ce8c3a8f18d0d306507c4f8ba178dd3d20207b8@%3Cdev.tomee.apache.org%3E","https://lists.apache.org/thread.html/rdf311f13e6356297e0ffe74397fdd25a3687b0a16e687c3ff5b834d8@%3Cdev.ranger.apache.org%3E","https://lists.apache.org/thread.html/rf28ab6f224b48452afd567dfffb705fbda0fdbbf6535f6bc69d47e91@%3Cdev.ranger.apache.org%3E","https://lists.apache.org/thread.html/rfc1ccfe89332155b72ce17f13a2701d3e7b9ec213324ceb90e79a28a@%3Cdev.ranger.apache.org%3E","https://security.netapp.com/advisory/ntap-20200327-0002/","https://www.oracle.com/security-alerts/cpuapr2020.html","http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200610-01-fastjason-en","https://lists.apache.org/thread.html/r1b103833cb5bc8466e24ff0ecc5e75b45a705334ab6a444e64e840a0@%3Cissues.bookkeeper.apache.org%3E","https://lists.apache.org/thread.html/rf1bbc0ea4a9f014cf94df9a12a6477d24a27f52741dbc87f2fd52ff2@%3Cissues.geode.apache.org%3E","https://www.oracle.com/security-alerts/cpuoct2020.html","https://github.com/FasterXML/jackson-databind/commit/74aba4042fce35ee0b91bd2847e788c10040d78b","https://github.com/FasterXML/jackson-databind/commit/9bb52c7122271df75435ec7e66ecf6b02b1ee14f","https://github.com/advisories/GHSA-4w82-r329-3q67"],"source_kind":"github","identifiers":["GHSA-4w82-r329-3q67","CVE-2020-8840"],"repository_url":"https://github.com/FasterXML/jackson-databind","blast_radius":0.0,"created_at":"2022-12-21T16:12:30.631Z","updated_at":"2026-06-20T05:11:27.985Z","epss_percentage":0.26587,"epss_percentile":0.97761,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTR3ODItcjMyOS0zcTY3","html_url":"https://advisories.ecosyste.ms/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTR3ODItcjMyOS0zcTY3","packages":[{"ecosystem":"maven","package_name":"com.fasterxml.jackson.core:jackson-databind","versions":[{"first_patched_version":"2.9.10.3","vulnerable_version_range":"\u003e= 2.9.0, \u003c= 2.9.10.2"},{"first_patched_version":"2.8.11.5","vulnerable_version_range":"\u003e= 2.8.0, \u003c= 2.8.11.4"}],"purl":null}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTR3ODItcjMyOS0zcTY3/related_packages","related_advisories":[]},{"uuid":"MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWd3dzctcDV3NC13cmZ2","url":"https://github.com/advisories/GHSA-gww7-p5w4-wrfv","title":"Deserialization of Untrusted Data in jackson-databind","description":"FasterXML jackson-databind 2.x before 2.6.7.4, 2.7.x before 2.7.9.7, 2.8.x before 2.8.11.5, and 2.9.x before 2.9.10.2 lacks certain `net.sf.ehcache` blocking.","origin":"UNSPECIFIED","severity":"CRITICAL","published_at":"2020-03-04T20:52:11.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":9.8,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","references":["https://nvd.nist.gov/vuln/detail/CVE-2019-20330","https://github.com/FasterXML/jackson-databind/issues/2526","https://github.com/FasterXML/jackson-databind/compare/jackson-databind-2.9.10.1...jackson-databind-2.9.10.2","https://lists.apache.org/thread.html/r107c8737db39ec9ec4f4e7147b249e29be79170b9ef4b80528105a2d@%3Cdev.zookeeper.apache.org%3E","https://lists.apache.org/thread.html/r2c77dd6ab8344285bd8e481b57cf3029965a4b0036eefccef74cdd44@%3Cnotifications.zookeeper.apache.org%3E","https://lists.apache.org/thread.html/r392099ed2757ff2e383b10440594e914d080511d7da1c8fed0612c1f@%3Ccommits.druid.apache.org%3E","https://lists.apache.org/thread.html/r3f8180d0d25a7c6473ebb9714b0c1d19a73f455ae70d0c5fefc17e6c@%3Cissues.zookeeper.apache.org%3E","https://lists.apache.org/thread.html/r428735963bee7cb99877b88d3228e28ec28af64646455c4f3e7a3c94@%3Cissues.zookeeper.apache.org%3E","https://lists.apache.org/thread.html/r50f513772f12e1babf65c7c2b9c16425bac2d945351879e2e267517f@%3Cissues.zookeeper.apache.org%3E","https://lists.apache.org/thread.html/r5c14fdcabdeaba258857bcb67198652e4dce1d33ddc590cd81d82393@%3Cdev.zookeeper.apache.org%3E","https://lists.apache.org/thread.html/r5c3644c97f0434d1ceb48ff48897a67bdbf3baf7efbe7d04625425b3@%3Ccommits.druid.apache.org%3E","https://lists.apache.org/thread.html/r5d3d10fdf28110da3f9ac1b7d08d7e252f98d7d37ce0a6bd139a2e4f@%3Cissues.zookeeper.apache.org%3E","https://lists.apache.org/thread.html/r67f4d4c48197454b83d62afbed8bebbda3764e6e3a6e26a848961764@%3Ccommits.zookeeper.apache.org%3E","https://lists.apache.org/thread.html/r707d23bb9ee245f50aa909add0da6e8d8f24719b1278ddd99d2428b2@%3Cissues.zookeeper.apache.org%3E","https://lists.apache.org/thread.html/r7a0821b44247a1e6c6fe5f2943b90ebc4f80a8d1fb0aa9a8b29a59a2@%3Ccommits.zookeeper.apache.org%3E","https://lists.apache.org/thread.html/r7fb123e7dad49af5886cfec7135c0fd5b74e4c67af029e1dc91ba744@%3Ccommits.druid.apache.org%3E","https://lists.apache.org/thread.html/r8831b7fa5ca87a1cf23ee08d6dedb7877a964c1d2bd869af24056a63@%3Ccommits.zookeeper.apache.org%3E","https://lists.apache.org/thread.html/r909c822409a276ba04dc2ae31179b16f6864ba02c4f9911bdffebf95@%3Cissues.zookeeper.apache.org%3E","https://lists.apache.org/thread.html/ra2e572f568de8df5ba151e6aebb225a0629faaf0476bf7c7ed877af8@%3Cnotifications.zookeeper.apache.org%3E","https://lists.apache.org/thread.html/ra5ce96faec37c26b0aa15b4b6a8b1cbb145a748653e56ae83e9685d0@%3Cnotifications.zookeeper.apache.org%3E","https://lists.apache.org/thread.html/ra8a80dbc7319916946397823aec0d893d24713cbf7b5aee0e957298c@%3Cdev.zookeeper.apache.org%3E","https://lists.apache.org/thread.html/rb532fed78d031fff477fd840b81946f6d1200f93a63698dae65aa528@%3Ccommits.druid.apache.org%3E","https://lists.apache.org/thread.html/rd1f346227e11fc515914f3a7b20d81543e51e5822ba71baa0452634a@%3Cissues.zookeeper.apache.org%3E","https://lists.apache.org/thread.html/rd49cfa41bbb71ef33b53736a6af2aa8ba88c2106e30f2a34902a87d2@%3Cnotifications.zookeeper.apache.org%3E","https://lists.apache.org/thread.html/rd6c6fef14944f3dcfb58d35f9317eb1c32a700e86c1b5231e45d3d0b@%3Ccommits.druid.apache.org%3E","https://lists.apache.org/thread.html/rfa57d9c2a27d3af14c69607fb1a3da00e758b2092aa88eb6a51b6e99@%3Cissues.zookeeper.apache.org%3E","https://lists.debian.org/debian-lts-announce/2020/02/msg00020.html","https://www.oracle.com/security-alerts/cpuapr2020.html","https://www.oracle.com/security-alerts/cpujul2020.html","https://lists.apache.org/thread.html/r1b103833cb5bc8466e24ff0ecc5e75b45a705334ab6a444e64e840a0@%3Cissues.bookkeeper.apache.org%3E","https://lists.apache.org/thread.html/rf1bbc0ea4a9f014cf94df9a12a6477d24a27f52741dbc87f2fd52ff2@%3Cissues.geode.apache.org%3E","https://www.oracle.com/security-alerts/cpuoct2020.html","https://www.oracle.com//security-alerts/cpujul2021.html","https://github.com/FasterXML/jackson-databind/commit/eb254813cc822d0af015ce8fe05febf50721dc53","https://github.com/FasterXML/jackson-databind/commit/fc4214a883dc087070f25da738ef0d49c2f3387e","https://security.netapp.com/advisory/ntap-20200127-0004","https://github.com/advisories/GHSA-gww7-p5w4-wrfv"],"source_kind":"github","identifiers":["GHSA-gww7-p5w4-wrfv","CVE-2019-20330"],"repository_url":"https://github.com/FasterXML/jackson-databind","blast_radius":0.0,"created_at":"2022-12-21T16:12:30.758Z","updated_at":"2026-06-20T04:07:55.691Z","epss_percentage":0.0864,"epss_percentile":0.94416,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWd3dzctcDV3NC13cmZ2","html_url":"https://advisories.ecosyste.ms/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWd3dzctcDV3NC13cmZ2","packages":[{"ecosystem":"maven","package_name":"com.fasterxml.jackson.core:jackson-databind","versions":[{"first_patched_version":"2.6.7.4","vulnerable_version_range":"\u003e= 2.0.0, \u003c= 2.6.7.3"},{"first_patched_version":"2.9.10.2","vulnerable_version_range":"\u003e= 2.9.0, \u003c= 2.9.10.1"},{"first_patched_version":"2.8.11.5","vulnerable_version_range":"\u003e= 2.8.0, \u003c= 2.8.11.4"},{"first_patched_version":"2.7.9.7","vulnerable_version_range":"\u003e= 2.7.0, \u003c= 2.7.9.6"}],"purl":null}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWd3dzctcDV3NC13cmZ2/related_packages","related_advisories":[]},{"uuid":"MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWdqbXctdmY5aC1nMjV2","url":"https://github.com/advisories/GHSA-gjmw-vf9h-g25v","title":"jackson-databind polymorphic typing issue","description":"A Polymorphic Typing issue was discovered in FasterXML jackson-databind 2.0.0 prior to 2.9.10.1, 2.8.11.5, and 2.6.7.3. When Default Typing is enabled (either globally or for a specific property) for an externally exposed JSON endpoint and the service has the apache-log4j-extra (version 1.2.x) jar in the classpath, and an attacker can provide a JNDI service to access, it is possible to make the service execute a malicious payload. ","origin":"UNSPECIFIED","severity":"CRITICAL","published_at":"2019-11-13T00:32:38.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":9.8,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","references":["https://nvd.nist.gov/vuln/detail/CVE-2019-17531","https://github.com/FasterXML/jackson-databind/issues/2498","https://medium.com/@cowtowncoder/on-jackson-cves-dont-panic-here-is-what-you-need-to-know-54cd0d6e8062","https://access.redhat.com/errata/RHSA-2019:4192","https://access.redhat.com/errata/RHSA-2020:0159","https://access.redhat.com/errata/RHSA-2020:0160","https://access.redhat.com/errata/RHSA-2020:0161","https://access.redhat.com/errata/RHSA-2020:0164","https://access.redhat.com/errata/RHSA-2020:0445","https://lists.apache.org/thread.html/b3c90d38f99db546de60fea65f99a924d540fae2285f014b79606ca5@%3Ccommits.pulsar.apache.org%3E","https://lists.apache.org/thread.html/r392099ed2757ff2e383b10440594e914d080511d7da1c8fed0612c1f@%3Ccommits.druid.apache.org%3E","https://lists.debian.org/debian-lts-announce/2019/12/msg00013.html","https://security.netapp.com/advisory/ntap-20191024-0005/","https://www.oracle.com/security-alerts/cpuapr2020.html","https://www.oracle.com/security-alerts/cpujan2020.html","https://www.oracle.com/security-alerts/cpujul2020.html","https://lists.apache.org/thread.html/r1b103833cb5bc8466e24ff0ecc5e75b45a705334ab6a444e64e840a0@%3Cissues.bookkeeper.apache.org%3E","https://lists.apache.org/thread.html/rf1bbc0ea4a9f014cf94df9a12a6477d24a27f52741dbc87f2fd52ff2@%3Cissues.geode.apache.org%3E","https://www.oracle.com/security-alerts/cpuoct2020.html","https://www.oracle.com//security-alerts/cpujul2021.html","https://github.com/FasterXML/jackson-databind/commit/b5a304a98590b6bb766134f9261e6566dcbbb6d0","https://github.com/advisories/GHSA-gjmw-vf9h-g25v"],"source_kind":"github","identifiers":["GHSA-gjmw-vf9h-g25v","CVE-2019-17531"],"repository_url":"https://github.com/FasterXML/jackson-databind","blast_radius":0.0,"created_at":"2022-12-21T16:13:06.113Z","updated_at":"2026-06-20T04:07:55.691Z","epss_percentage":0.05329,"epss_percentile":0.91564,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWdqbXctdmY5aC1nMjV2","html_url":"https://advisories.ecosyste.ms/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWdqbXctdmY5aC1nMjV2","packages":[{"ecosystem":"maven","package_name":"com.fasterxml.jackson.core:jackson-databind","versions":[{"first_patched_version":"2.6.7.3","vulnerable_version_range":"\u003c 2.6.7.3"},{"first_patched_version":"2.8.11.5","vulnerable_version_range":"\u003e= 2.7.0, \u003c 2.8.11.5"},{"first_patched_version":"2.9.10.1","vulnerable_version_range":"\u003e= 2.9.0, \u003c 2.9.10.1"}],"purl":null}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWdqbXctdmY5aC1nMjV2/related_packages","related_advisories":[]},{"uuid":"MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWZtbWMtNzQycS1qZzc1","url":"https://github.com/advisories/GHSA-fmmc-742q-jg75","title":"jackson-databind polymorphic typing issue","description":"A Polymorphic Typing issue was discovered in FasterXML jackson-databind 2.0.0 prior to 2.9.10.1, 2.8.11.5, and 2.6.7.3. When Default Typing is enabled (either globally or for a specific property) for an externally exposed JSON endpoint and the service has the p6spy (3.8.6) jar in the classpath, and an attacker can find an RMI service endpoint to access, it is possible to make the service execute a malicious payload. This issue exists because of com.p6spy.engine.spy.P6DataSource mishandling.","origin":"UNSPECIFIED","severity":"CRITICAL","published_at":"2019-11-13T00:32:27.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":9.8,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","references":["https://nvd.nist.gov/vuln/detail/CVE-2019-16943","https://github.com/FasterXML/jackson-databind/issues/2478","https://medium.com/@cowtowncoder/on-jackson-cves-dont-panic-here-is-what-you-need-to-know-54cd0d6e8062","https://access.redhat.com/errata/RHSA-2020:0159","https://access.redhat.com/errata/RHSA-2020:0160","https://access.redhat.com/errata/RHSA-2020:0161","https://access.redhat.com/errata/RHSA-2020:0164","https://access.redhat.com/errata/RHSA-2020:0445","https://lists.apache.org/thread.html/519eb0fd45642dcecd9ff74cb3e71c20a4753f7d82e2f07864b5108f@%3Cdev.drill.apache.org%3E","https://lists.apache.org/thread.html/5ec8d8d485c2c8ac55ea425f4cd96596ef37312532712639712ebcdd@%3Ccommits.iceberg.apache.org%3E","https://lists.apache.org/thread.html/6788e4c991f75b89d290ad06b463fcd30bcae99fee610345a35b7bc6@%3Cissues.iceberg.apache.org%3E","https://lists.apache.org/thread.html/b0656d359c7d40ec9f39c8cc61bca66802ef9a2a12ee199f5b0c1442@%3Cdev.drill.apache.org%3E","https://lists.apache.org/thread.html/f9bc3e55f4e28d1dcd1a69aae6d53e609a758e34d2869b4d798e13cc@%3Cissues.drill.apache.org%3E","https://lists.apache.org/thread.html/r392099ed2757ff2e383b10440594e914d080511d7da1c8fed0612c1f@%3Ccommits.druid.apache.org%3E","https://lists.debian.org/debian-lts-announce/2019/10/msg00001.html","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/Q7CANA7KV53JROZDX5Z5P26UG5VN2K43/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/TH5VFUN4P7CCIP7KSEXYA5MUTFCUDUJT/","https://seclists.org/bugtraq/2019/Oct/6","https://security.netapp.com/advisory/ntap-20191017-0006/","https://www.debian.org/security/2019/dsa-4542","https://www.oracle.com/security-alerts/cpuapr2020.html","https://www.oracle.com/security-alerts/cpujan2020.html","https://www.oracle.com/security-alerts/cpujul2020.html","https://lists.apache.org/thread.html/r1b103833cb5bc8466e24ff0ecc5e75b45a705334ab6a444e64e840a0@%3Cissues.bookkeeper.apache.org%3E","https://lists.apache.org/thread.html/rf1bbc0ea4a9f014cf94df9a12a6477d24a27f52741dbc87f2fd52ff2@%3Cissues.geode.apache.org%3E","https://www.oracle.com/security-alerts/cpuoct2020.html","https://www.oracle.com//security-alerts/cpujul2021.html","https://github.com/FasterXML/jackson-databind/commit/328a0f833daf6baa443ac3b37c818a0204714b0b","https://github.com/FasterXML/jackson-databind/commit/bc67eb11a7cf57561f861ff16f879f1fceb5779f","https://github.com/advisories/GHSA-fmmc-742q-jg75"],"source_kind":"github","identifiers":["GHSA-fmmc-742q-jg75","CVE-2019-16943"],"repository_url":"https://github.com/FasterXML/jackson-databind","blast_radius":0.0,"created_at":"2022-12-21T16:13:06.104Z","updated_at":"2026-06-20T04:07:56.735Z","epss_percentage":0.04861,"epss_percentile":0.90906,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWZtbWMtNzQycS1qZzc1","html_url":"https://advisories.ecosyste.ms/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWZtbWMtNzQycS1qZzc1","packages":[{"ecosystem":"maven","package_name":"com.fasterxml.jackson.core:jackson-databind","versions":[{"first_patched_version":"2.6.7.3","vulnerable_version_range":"\u003c 2.6.7.3"},{"first_patched_version":"2.8.11.5","vulnerable_version_range":"\u003e= 2.7.0, \u003c 2.8.11.5"},{"first_patched_version":"2.9.10.1","vulnerable_version_range":"\u003e= 2.9.0, \u003c 2.9.10.1"}],"purl":null}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWZtbWMtNzQycS1qZzc1/related_packages","related_advisories":[]},{"uuid":"MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLW14N3AtNjY3OS04ZzNx","url":"https://github.com/advisories/GHSA-mx7p-6679-8g3q","title":"Polymorphic Typing in FasterXML jackson-databind","description":"A Polymorphic Typing issue was discovered in FasterXML jackson-databind 2.0.0 through 2.9.10. When Default Typing is enabled (either globally or for a specific property) for an externally exposed JSON endpoint and the service has the commons-dbcp (1.4) jar in the classpath, and an attacker can find an RMI service endpoint to access, it is possible to make the service execute a malicious payload. This issue exists because of org.apache.commons.dbcp.datasources.SharedPoolDataSource and org.apache.commons.dbcp.datasources.PerUserPoolDataSource mishandling.","origin":"UNSPECIFIED","severity":"CRITICAL","published_at":"2019-10-28T20:51:15.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":9.8,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","references":["https://nvd.nist.gov/vuln/detail/CVE-2019-16942","https://github.com/FasterXML/jackson-databind/issues/2478","https://issues.apache.org/jira/browse/GEODE-7255","https://medium.com/@cowtowncoder/on-jackson-cves-dont-panic-here-is-what-you-need-to-know-54cd0d6e8062","https://access.redhat.com/errata/RHSA-2019:3901","https://access.redhat.com/errata/RHSA-2020:0159","https://access.redhat.com/errata/RHSA-2020:0160","https://access.redhat.com/errata/RHSA-2020:0161","https://access.redhat.com/errata/RHSA-2020:0164","https://access.redhat.com/errata/RHSA-2020:0445","https://lists.apache.org/thread.html/519eb0fd45642dcecd9ff74cb3e71c20a4753f7d82e2f07864b5108f@%3Cdev.drill.apache.org%3E","https://lists.apache.org/thread.html/7782a937c9259a58337ee36b2961f00e2d744feafc13084e176d0df5@%3Cissues.geode.apache.org%3E","https://lists.apache.org/thread.html/a430dbc9be874c41314cc69e697384567a9a24025e819d9485547954@%3Cissues.geode.apache.org%3E","https://lists.apache.org/thread.html/b0656d359c7d40ec9f39c8cc61bca66802ef9a2a12ee199f5b0c1442@%3Cdev.drill.apache.org%3E","https://lists.apache.org/thread.html/b2e23c94f9dfef53e04c492e5d02e5c75201734be7adc73a49ef2370@%3Cissues.geode.apache.org%3E","https://lists.apache.org/thread.html/f9bc3e55f4e28d1dcd1a69aae6d53e609a758e34d2869b4d798e13cc@%3Cissues.drill.apache.org%3E","https://lists.debian.org/debian-lts-announce/2019/10/msg00001.html","https://seclists.org/bugtraq/2019/Oct/6","https://www.debian.org/security/2019/dsa-4542","https://www.oracle.com/security-alerts/cpuapr2020.html","https://www.oracle.com/security-alerts/cpujan2020.html","https://www.oracle.com/security-alerts/cpujul2020.html","https://lists.apache.org/thread.html/r1b103833cb5bc8466e24ff0ecc5e75b45a705334ab6a444e64e840a0@%3Cissues.bookkeeper.apache.org%3E","https://lists.apache.org/thread.html/rf1bbc0ea4a9f014cf94df9a12a6477d24a27f52741dbc87f2fd52ff2@%3Cissues.geode.apache.org%3E","https://www.oracle.com/security-alerts/cpuoct2020.html","https://www.oracle.com/security-alerts/cpuApr2021.html","https://www.oracle.com//security-alerts/cpujul2021.html","https://github.com/FasterXML/jackson-databind/commit/328a0f833daf6baa443ac3b37c818a0204714b0b","https://github.com/FasterXML/jackson-databind/commit/54aa38d87dcffa5ccc23e64922e9536c82c1b9c8","https://github.com/FasterXML/jackson-databind/commit/9593e16cf5a3d289a9c584f7123639655de9ddac","https://github.com/FasterXML/jackson-databind/commit/bc67eb11a7cf57561f861ff16f879f1fceb5779f","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/Q7CANA7KV53JROZDX5Z5P26UG5VN2K43","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/TH5VFUN4P7CCIP7KSEXYA5MUTFCUDUJT","https://security.netapp.com/advisory/ntap-20191017-0006","https://github.com/advisories/GHSA-mx7p-6679-8g3q"],"source_kind":"github","identifiers":["GHSA-mx7p-6679-8g3q","CVE-2019-16942"],"repository_url":"https://github.com/FasterXML/jackson-databind","blast_radius":0.0,"created_at":"2022-12-21T16:13:06.095Z","updated_at":"2026-06-20T04:06:15.702Z","epss_percentage":0.05681,"epss_percentile":0.91998,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLW14N3AtNjY3OS04ZzNx","html_url":"https://advisories.ecosyste.ms/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLW14N3AtNjY3OS04ZzNx","packages":[{"ecosystem":"maven","package_name":"com.fasterxml.jackson.core:jackson-databind","versions":[{"first_patched_version":"2.8.11.5","vulnerable_version_range":"\u003e= 2.7.0, \u003c 2.8.11.5"},{"first_patched_version":"2.6.7.3","vulnerable_version_range":"\u003e= 2.0.0, \u003c 2.6.7.3"},{"first_patched_version":"2.9.10.1","vulnerable_version_range":"\u003e= 2.9.0, \u003c 2.9.10.1"}],"purl":null}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLW14N3AtNjY3OS04ZzNx/related_packages","related_advisories":[]},{"uuid":"MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTg1Y3ctaGo2NS1xcXY5","url":"https://github.com/advisories/GHSA-85cw-hj65-qqv9","title":"Polymorphic Typing issue in FasterXML jackson-databind","description":"A Polymorphic Typing issue was discovered in FasterXML jackson-databind before 2.9.10, 2.8.11.5, and 2.6.7.3. It is related to com.zaxxer.hikari.HikariDataSource. This is a different vulnerability than CVE-2019-14540.","origin":"UNSPECIFIED","severity":"CRITICAL","published_at":"2019-09-23T18:33:45.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":9.8,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","references":["https://nvd.nist.gov/vuln/detail/CVE-2019-16335","https://github.com/FasterXML/jackson-databind/issues/2449","https://access.redhat.com/errata/RHSA-2019:3200","https://access.redhat.com/errata/RHSA-2020:0159","https://access.redhat.com/errata/RHSA-2020:0160","https://access.redhat.com/errata/RHSA-2020:0161","https://access.redhat.com/errata/RHSA-2020:0164","https://access.redhat.com/errata/RHSA-2020:0445","https://access.redhat.com/errata/RHSA-2020:0729","https://lists.apache.org/thread.html/0fcef7321095ce0bc597d468d150cff3d647f4cb3aef3bd4d20e1c69@%3Ccommits.tinkerpop.apache.org%3E","https://lists.apache.org/thread.html/40c00861b53bb611dee7d6f35f864aa7d1c1bd77df28db597cbf27e1@%3Cissues.hbase.apache.org%3E","https://lists.apache.org/thread.html/519eb0fd45642dcecd9ff74cb3e71c20a4753f7d82e2f07864b5108f@%3Cdev.drill.apache.org%3E","https://lists.apache.org/thread.html/a360b46061c91c5cad789b6c3190aef9b9f223a2b75c9c9f046fe016@%3Cissues.hbase.apache.org%3E","https://lists.apache.org/thread.html/ad0d238e97a7da5eca47a014f0f7e81f440ed6bf74a93183825e18b9@%3Cissues.hbase.apache.org%3E","https://lists.apache.org/thread.html/b0656d359c7d40ec9f39c8cc61bca66802ef9a2a12ee199f5b0c1442@%3Cdev.drill.apache.org%3E","https://lists.apache.org/thread.html/bcce5a9c532b386c68dab2f6b3ce8b0cc9b950ec551766e76391caa3@%3Ccommits.nifi.apache.org%3E","https://lists.apache.org/thread.html/dc6b5cad721a4f6b3b62ed1163894941140d9d5656140fb757505ca0@%3Cissues.hbase.apache.org%3E","https://lists.apache.org/thread.html/e90c3feb21702e68a8c08afce37045adb3870f2bf8223fa403fb93fb@%3Ccommits.hbase.apache.org%3E","https://lists.apache.org/thread.html/f9bc3e55f4e28d1dcd1a69aae6d53e609a758e34d2869b4d798e13cc@%3Cissues.drill.apache.org%3E","https://lists.apache.org/thread.html/rca37935d661f4689cb4119f1b3b224413b22be161b678e6e6ce0c69b@%3Ccommits.nifi.apache.org%3E","https://lists.debian.org/debian-lts-announce/2019/10/msg00001.html","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/Q7CANA7KV53JROZDX5Z5P26UG5VN2K43/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/TH5VFUN4P7CCIP7KSEXYA5MUTFCUDUJT/","https://seclists.org/bugtraq/2019/Oct/6","https://security.netapp.com/advisory/ntap-20191004-0002/","https://www.debian.org/security/2019/dsa-4542","https://www.oracle.com/security-alerts/cpuapr2020.html","https://www.oracle.com/security-alerts/cpujan2020.html","https://www.oracle.com/security-alerts/cpujul2020.html","https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html","https://lists.apache.org/thread.html/r1b103833cb5bc8466e24ff0ecc5e75b45a705334ab6a444e64e840a0@%3Cissues.bookkeeper.apache.org%3E","https://lists.apache.org/thread.html/rf1bbc0ea4a9f014cf94df9a12a6477d24a27f52741dbc87f2fd52ff2@%3Cissues.geode.apache.org%3E","https://www.oracle.com/security-alerts/cpuoct2020.html","https://github.com/FasterXML/jackson-databind/commit/73c1c2cc76e6cdd7f3a5615cbe3207fe96e4d3db","https://github.com/advisories/GHSA-85cw-hj65-qqv9"],"source_kind":"github","identifiers":["GHSA-85cw-hj65-qqv9","CVE-2019-16335"],"repository_url":"https://github.com/FasterXML/jackson-databind","blast_radius":0.0,"created_at":"2022-12-21T16:13:28.082Z","updated_at":"2026-06-20T04:07:56.737Z","epss_percentage":0.04918,"epss_percentile":0.90996,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTg1Y3ctaGo2NS1xcXY5","html_url":"https://advisories.ecosyste.ms/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTg1Y3ctaGo2NS1xcXY5","packages":[{"ecosystem":"maven","package_name":"com.fasterxml.jackson.core:jackson-databind","versions":[{"first_patched_version":"2.6.7.3","vulnerable_version_range":"\u003c 2.6.7.3"},{"first_patched_version":"2.8.11.5","vulnerable_version_range":"\u003e= 2.7.0, \u003c 2.8.11.5"},{"first_patched_version":"2.9.10","vulnerable_version_range":"\u003e= 2.9.0, \u003c 2.9.10"}],"purl":null}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTg1Y3ctaGo2NS1xcXY5/related_packages","related_advisories":[]},{"uuid":"MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWg4MjItcjRyNS12OGpn","url":"https://github.com/advisories/GHSA-h822-r4r5-v8jg","title":"Polymorphic Typing issue in FasterXML jackson-databind","description":"A Polymorphic Typing issue was discovered in FasterXML jackson-databind before 2.9.10, 2.8.11.5, and 2.6.7.3. It is related to `com.zaxxer.hikari.HikariConfig`.","origin":"UNSPECIFIED","severity":"CRITICAL","published_at":"2019-09-23T18:33:25.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":9.8,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","references":["https://nvd.nist.gov/vuln/detail/CVE-2019-14540","https://github.com/FasterXML/jackson-databind/blob/master/release-notes/VERSION-2.x","https://github.com/FasterXML/jackson-databind/issues/2410","https://github.com/FasterXML/jackson-databind/issues/2449","https://access.redhat.com/errata/RHSA-2019:3200","https://access.redhat.com/errata/RHSA-2020:0159","https://access.redhat.com/errata/RHSA-2020:0160","https://access.redhat.com/errata/RHSA-2020:0161","https://access.redhat.com/errata/RHSA-2020:0164","https://access.redhat.com/errata/RHSA-2020:0445","https://lists.apache.org/thread.html/0fcef7321095ce0bc597d468d150cff3d647f4cb3aef3bd4d20e1c69@%3Ccommits.tinkerpop.apache.org%3E","https://lists.apache.org/thread.html/40c00861b53bb611dee7d6f35f864aa7d1c1bd77df28db597cbf27e1@%3Cissues.hbase.apache.org%3E","https://lists.apache.org/thread.html/519eb0fd45642dcecd9ff74cb3e71c20a4753f7d82e2f07864b5108f@%3Cdev.drill.apache.org%3E","https://lists.apache.org/thread.html/a360b46061c91c5cad789b6c3190aef9b9f223a2b75c9c9f046fe016@%3Cissues.hbase.apache.org%3E","https://lists.apache.org/thread.html/a4f2c9fb36642a48912cdec6836ec00e497427717c5d377f8d7ccce6@%3Cnotifications.zookeeper.apache.org%3E","https://lists.apache.org/thread.html/ad0d238e97a7da5eca47a014f0f7e81f440ed6bf74a93183825e18b9@%3Cissues.hbase.apache.org%3E","https://lists.apache.org/thread.html/b0656d359c7d40ec9f39c8cc61bca66802ef9a2a12ee199f5b0c1442@%3Cdev.drill.apache.org%3E","https://lists.apache.org/thread.html/bcce5a9c532b386c68dab2f6b3ce8b0cc9b950ec551766e76391caa3@%3Ccommits.nifi.apache.org%3E","https://lists.apache.org/thread.html/dc6b5cad721a4f6b3b62ed1163894941140d9d5656140fb757505ca0@%3Cissues.hbase.apache.org%3E","https://lists.apache.org/thread.html/e90c3feb21702e68a8c08afce37045adb3870f2bf8223fa403fb93fb@%3Ccommits.hbase.apache.org%3E","https://lists.apache.org/thread.html/f9bc3e55f4e28d1dcd1a69aae6d53e609a758e34d2869b4d798e13cc@%3Cissues.drill.apache.org%3E","https://lists.apache.org/thread.html/r8aaf4ee16bbaf6204731d4770d96ebb34b258cd79b491f9cdd7f2540@%3Ccommits.nifi.apache.org%3E","https://lists.apache.org/thread.html/rca37935d661f4689cb4119f1b3b224413b22be161b678e6e6ce0c69b@%3Ccommits.nifi.apache.org%3E","https://lists.debian.org/debian-lts-announce/2019/10/msg00001.html","https://seclists.org/bugtraq/2019/Oct/6","https://www.debian.org/security/2019/dsa-4542","https://www.oracle.com/security-alerts/cpuapr2020.html","https://www.oracle.com/security-alerts/cpujan2020.html","https://www.oracle.com/security-alerts/cpujul2020.html","https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html","https://lists.apache.org/thread.html/r1b103833cb5bc8466e24ff0ecc5e75b45a705334ab6a444e64e840a0@%3Cissues.bookkeeper.apache.org%3E","https://lists.apache.org/thread.html/rf1bbc0ea4a9f014cf94df9a12a6477d24a27f52741dbc87f2fd52ff2@%3Cissues.geode.apache.org%3E","https://www.oracle.com/security-alerts/cpuoct2020.html","https://github.com/FasterXML/jackson-databind/commit/d4983c740fec7d5576b207a8c30a63d3ea7443de","https://github.com/FasterXML/jackson-databind/commit/73c1c2cc76e6cdd7f3a5615cbe3207fe96e4d3db","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/Q7CANA7KV53JROZDX5Z5P26UG5VN2K43","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/TH5VFUN4P7CCIP7KSEXYA5MUTFCUDUJT","https://security.netapp.com/advisory/ntap-20191004-0002","https://github.com/advisories/GHSA-h822-r4r5-v8jg"],"source_kind":"github","identifiers":["GHSA-h822-r4r5-v8jg","CVE-2019-14540"],"repository_url":"https://github.com/FasterXML/jackson-databind","blast_radius":0.0,"created_at":"2022-12-21T16:13:28.073Z","updated_at":"2026-06-20T04:07:56.738Z","epss_percentage":0.10676,"epss_percentile":0.9524,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWg4MjItcjRyNS12OGpn","html_url":"https://advisories.ecosyste.ms/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWg4MjItcjRyNS12OGpn","packages":[{"ecosystem":"maven","package_name":"com.fasterxml.jackson.core:jackson-databind","versions":[{"first_patched_version":"2.6.7.3","vulnerable_version_range":"\u003c 2.6.7.3"},{"first_patched_version":"2.8.11.5","vulnerable_version_range":"\u003e= 2.7.0, \u003c 2.8.11.5"},{"first_patched_version":"2.9.10","vulnerable_version_range":"\u003e= 2.9.0, \u003c 2.9.10"}],"purl":null}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWg4MjItcjRyNS12OGpn/related_packages","related_advisories":[]},{"uuid":"MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWd3cDQtaGZ2Ni1wN2h3","url":"https://github.com/advisories/GHSA-gwp4-hfv6-p7hw","title":"Deserialization of untrusted data in FasterXML jackson-databind","description":"A Polymorphic Typing issue was discovered in FasterXML jackson-databind 2.x before 2.9.9.2, 2.8.11.4, 2.7.9.6, and 2.6.7.3. This occurs when Default Typing is enabled (either globally or for a specific property) for an externally exposed JSON endpoint and the service has the logback jar in the classpath.","origin":"UNSPECIFIED","severity":"HIGH","published_at":"2019-08-01T19:18:06.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":7.5,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","references":["https://nvd.nist.gov/vuln/detail/CVE-2019-14439","https://github.com/FasterXML/jackson-databind/commit/ad418eeb974e357f2797aef64aa0e3ffaaa6125b","https://github.com/FasterXML/jackson-databind/compare/jackson-databind-2.9.9.1...jackson-databind-2.9.9.2","https://github.com/FasterXML/jackson-databind/issues/2389","https://access.redhat.com/errata/RHSA-2019:3200","https://lists.apache.org/thread.html/0d4b630d9ee724aee50703397d9d1afa2b2befc9395ba7797d0ccea9@%3Cdev.tomee.apache.org%3E","https://lists.apache.org/thread.html/2d2a76440becb610b9a9cb49b15eac3934b02c2dbcaacde1000353e4@%3Cdev.tomee.apache.org%3E","https://lists.apache.org/thread.html/34717424b4d08b74f65c09a083d6dd1cb0763f37a15d6de135998c1d@%3Cdev.tomee.apache.org%3E","https://lists.apache.org/thread.html/3f99ae8dcdbd69438cb733d745ee3ad5e852068490719a66509b4592@%3Ccommits.cassandra.apache.org%3E","https://lists.apache.org/thread.html/519eb0fd45642dcecd9ff74cb3e71c20a4753f7d82e2f07864b5108f@%3Cdev.drill.apache.org%3E","https://lists.apache.org/thread.html/56c8042873595b8c863054c7bfccab4bf2c01c6f5abedae249d914b9@%3Cdev.tomee.apache.org%3E","https://lists.apache.org/thread.html/5ecc333113b139429f4f05000d4aa2886974d4df3269c1dd990bb319@%3Cdev.tomee.apache.org%3E","https://lists.apache.org/thread.html/5fc0e16b7af2590bf1e97c76c136291c4fdb244ee63c65c485c9a7a1@%3Cdev.tomee.apache.org%3E","https://lists.apache.org/thread.html/87e46591de8925f719664a845572d184027258c5a7af0a471b53c77b@%3Cdev.tomee.apache.org%3E","https://lists.apache.org/thread.html/940b4c3fef002461b89a050935337056d4a036a65ef68e0bbd4621ef@%3Cdev.struts.apache.org%3E","https://lists.apache.org/thread.html/b0656d359c7d40ec9f39c8cc61bca66802ef9a2a12ee199f5b0c1442@%3Cdev.drill.apache.org%3E","https://lists.apache.org/thread.html/bcce5a9c532b386c68dab2f6b3ce8b0cc9b950ec551766e76391caa3@%3Ccommits.nifi.apache.org%3E","https://lists.apache.org/thread.html/ee0a051428d2c719acfa297d0854a189ea5e284ef3ed491fa672f4be@%3Cdev.tomee.apache.org%3E","https://lists.apache.org/thread.html/f9bc3e55f4e28d1dcd1a69aae6d53e609a758e34d2869b4d798e13cc@%3Cissues.drill.apache.org%3E","https://lists.apache.org/thread.html/rca37935d661f4689cb4119f1b3b224413b22be161b678e6e6ce0c69b@%3Ccommits.nifi.apache.org%3E","https://lists.debian.org/debian-lts-announce/2019/08/msg00011.html","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OVRZDN2T6AZ6DJCZJ3VSIQIVHBVMVWBL/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/TXRVXNRFHJSQWFHPRJQRI5UPMZ63B544/","https://seclists.org/bugtraq/2019/Oct/6","https://security.netapp.com/advisory/ntap-20190814-0001/","https://www.debian.org/security/2019/dsa-4542","https://www.oracle.com/security-alerts/cpuapr2020.html","https://www.oracle.com/security-alerts/cpujan2020.html","https://www.oracle.com/security-alerts/cpujul2020.html","https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html","https://github.com/advisories/GHSA-gwp4-hfv6-p7hw"],"source_kind":"github","identifiers":["GHSA-gwp4-hfv6-p7hw","CVE-2019-14439"],"repository_url":"https://github.com/FasterXML/jackson-databind","blast_radius":0.0,"created_at":"2022-12-21T16:13:07.671Z","updated_at":"2026-06-20T05:08:02.500Z","epss_percentage":0.10763,"epss_percentile":0.95268,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWd3cDQtaGZ2Ni1wN2h3","html_url":"https://advisories.ecosyste.ms/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWd3cDQtaGZ2Ni1wN2h3","packages":[{"ecosystem":"maven","package_name":"com.fasterxml.jackson.core:jackson-databind","versions":[{"first_patched_version":"2.6.7.3","vulnerable_version_range":"\u003c 2.6.7.3"},{"first_patched_version":"2.7.9.6","vulnerable_version_range":"\u003e= 2.7.0, \u003c 2.7.9.6"},{"first_patched_version":"2.9.9.2","vulnerable_version_range":"\u003e= 2.9.0, \u003c 2.9.9.2"}],"purl":null}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWd3cDQtaGZ2Ni1wN2h3/related_packages","related_advisories":[]},{"uuid":"MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTZmcHAtcmdqOS04cndj","url":"https://github.com/advisories/GHSA-6fpp-rgj9-8rwc","title":"Deserialization of untrusted data in FasterXML jackson-databind","description":"SubTypeValidator.java in FasterXML jackson-databind before 2.9.9.2, 2.8.11.4, and 2.7.9.6 mishandles default typing when ehcache is used (because of net.sf.ehcache.transaction.manager.DefaultTransactionManagerLookup), leading to remote code execution.","origin":"UNSPECIFIED","severity":"CRITICAL","published_at":"2019-08-01T19:18:00.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":9.8,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","references":["https://nvd.nist.gov/vuln/detail/CVE-2019-14379","https://github.com/FasterXML/jackson-databind/compare/jackson-databind-2.9.9.1...jackson-databind-2.9.9.2","https://github.com/FasterXML/jackson-databind/issues/2387","https://access.redhat.com/errata/RHBA-2019:2824","https://access.redhat.com/errata/RHSA-2019:2743","https://access.redhat.com/errata/RHSA-2019:2858","https://access.redhat.com/errata/RHSA-2019:2935","https://access.redhat.com/errata/RHSA-2019:2936","https://access.redhat.com/errata/RHSA-2019:2937","https://access.redhat.com/errata/RHSA-2019:2938","https://access.redhat.com/errata/RHSA-2019:2998","https://lists.apache.org/thread.html/0d4b630d9ee724aee50703397d9d1afa2b2befc9395ba7797d0ccea9@%3Cdev.tomee.apache.org%3E","https://lists.apache.org/thread.html/0fcef7321095ce0bc597d468d150cff3d647f4cb3aef3bd4d20e1c69@%3Ccommits.tinkerpop.apache.org%3E","https://lists.apache.org/thread.html/2766188be238a446a250ef76801037d452979152d85bce5e46805815@%3Cissues.iceberg.apache.org%3E","https://lists.apache.org/thread.html/2d2a76440becb610b9a9cb49b15eac3934b02c2dbcaacde1000353e4@%3Cdev.tomee.apache.org%3E","https://lists.apache.org/thread.html/34717424b4d08b74f65c09a083d6dd1cb0763f37a15d6de135998c1d@%3Cdev.tomee.apache.org%3E","https://lists.apache.org/thread.html/525bcf949a4b0da87a375cbad2680b8beccde749522f24c49befe7fb@%3Ccommits.pulsar.apache.org%3E","https://lists.apache.org/thread.html/56c8042873595b8c863054c7bfccab4bf2c01c6f5abedae249d914b9@%3Cdev.tomee.apache.org%3E","https://lists.apache.org/thread.html/5ecc333113b139429f4f05000d4aa2886974d4df3269c1dd990bb319@%3Cdev.tomee.apache.org%3E","https://lists.apache.org/thread.html/5fc0e16b7af2590bf1e97c76c136291c4fdb244ee63c65c485c9a7a1@%3Cdev.tomee.apache.org%3E","https://lists.apache.org/thread.html/689c6bcc6c7612eee71e453a115a4c8581e7b718537025d4b265783d@%3Cissues.iceberg.apache.org%3E","https://lists.apache.org/thread.html/75f482fdc84abe6d0c8f438a76437c335a7bbeb5cddd4d70b4bc0cbf@%3Cissues.iceberg.apache.org%3E","https://lists.apache.org/thread.html/859815b2e9f1575acbb2b260b73861c16ca49bca627fa0c46419051f@%3Cissues.iceberg.apache.org%3E","https://lists.apache.org/thread.html/8723b52c2544e6cb804bc8a36622c584acd1bd6c53f2b6034c9fea54@%3Cissues.iceberg.apache.org%3E","https://lists.apache.org/thread.html/87e46591de8925f719664a845572d184027258c5a7af0a471b53c77b@%3Cdev.tomee.apache.org%3E","https://lists.apache.org/thread.html/940b4c3fef002461b89a050935337056d4a036a65ef68e0bbd4621ef@%3Cdev.struts.apache.org%3E","https://lists.apache.org/thread.html/99944f86abefde389da9b4040ea2327c6aa0b53a2ff9352bd4cfec17@%3Cissues.iceberg.apache.org%3E","https://lists.apache.org/thread.html/d161ff3d59c5a8213400dd6afb1cce1fac4f687c32d1e0c0bfbfaa2d@%3Cissues.iceberg.apache.org%3E","https://lists.apache.org/thread.html/e25e734c315f70d8876a846926cfe3bfa1a4888044f146e844caf72f@%3Ccommits.ambari.apache.org%3E","https://lists.apache.org/thread.html/ee0a051428d2c719acfa297d0854a189ea5e284ef3ed491fa672f4be@%3Cdev.tomee.apache.org%3E","https://lists.apache.org/thread.html/f17f63b0f8a57e4a5759e01d25cffc0548f0b61ff5c6bfd704ad2f2a@%3Ccommits.ambari.apache.org%3E","https://lists.debian.org/debian-lts-announce/2019/08/msg00011.html","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OVRZDN2T6AZ6DJCZJ3VSIQIVHBVMVWBL/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/TXRVXNRFHJSQWFHPRJQRI5UPMZ63B544/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UKUALE2TUCKEKOHE2D342PQXN4MWCSLC/","https://security.netapp.com/advisory/ntap-20190814-0001/","https://access.redhat.com/errata/RHSA-2019:3044","https://access.redhat.com/errata/RHSA-2019:3045","https://access.redhat.com/errata/RHSA-2019:3046","https://access.redhat.com/errata/RHSA-2019:3050","https://access.redhat.com/errata/RHSA-2019:3149","https://access.redhat.com/errata/RHSA-2019:3200","https://access.redhat.com/errata/RHSA-2019:3292","https://access.redhat.com/errata/RHSA-2019:3297","https://access.redhat.com/errata/RHSA-2019:3901","https://access.redhat.com/errata/RHSA-2020:0727","https://lists.apache.org/thread.html/519eb0fd45642dcecd9ff74cb3e71c20a4753f7d82e2f07864b5108f@%3Cdev.drill.apache.org%3E","https://lists.apache.org/thread.html/6788e4c991f75b89d290ad06b463fcd30bcae99fee610345a35b7bc6@%3Cissues.iceberg.apache.org%3E","https://lists.apache.org/thread.html/b0656d359c7d40ec9f39c8cc61bca66802ef9a2a12ee199f5b0c1442@%3Cdev.drill.apache.org%3E","https://lists.apache.org/thread.html/f9bc3e55f4e28d1dcd1a69aae6d53e609a758e34d2869b4d798e13cc@%3Cissues.drill.apache.org%3E","https://www.oracle.com/security-alerts/cpuapr2020.html","https://www.oracle.com/security-alerts/cpujan2020.html","https://www.oracle.com/security-alerts/cpujul2020.html","https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html","https://lists.apache.org/thread.html/r1b103833cb5bc8466e24ff0ecc5e75b45a705334ab6a444e64e840a0@%3Cissues.bookkeeper.apache.org%3E","https://lists.apache.org/thread.html/rf1bbc0ea4a9f014cf94df9a12a6477d24a27f52741dbc87f2fd52ff2@%3Cissues.geode.apache.org%3E","https://www.oracle.com/security-alerts/cpuoct2020.html","https://www.oracle.com/security-alerts/cpuApr2021.html","https://support.apple.com/kb/HT213189","http://seclists.org/fulldisclosure/2022/Mar/23","https://github.com/FasterXML/jackson-databind/commit/ad418eeb974e357f2797aef64aa0e3ffaaa6125b","https://github.com/advisories/GHSA-6fpp-rgj9-8rwc"],"source_kind":"github","identifiers":["GHSA-6fpp-rgj9-8rwc","CVE-2019-14379"],"repository_url":"https://github.com/FasterXML/jackson-databind","blast_radius":0.0,"created_at":"2022-12-21T16:13:06.085Z","updated_at":"2026-06-20T04:07:56.740Z","epss_percentage":0.08045,"epss_percentile":0.94053,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTZmcHAtcmdqOS04cndj","html_url":"https://advisories.ecosyste.ms/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTZmcHAtcmdqOS04cndj","packages":[{"ecosystem":"maven","package_name":"com.fasterxml.jackson.core:jackson-databind","versions":[{"first_patched_version":"2.7.9.6","vulnerable_version_range":"\u003c 2.7.9.6"},{"first_patched_version":"2.8.11.4","vulnerable_version_range":"\u003e= 2.8.0, \u003c 2.8.11.4"},{"first_patched_version":"2.9.9.2","vulnerable_version_range":"\u003e= 2.9.0, \u003c 2.9.9.2"}],"purl":null}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTZmcHAtcmdqOS04cndj/related_packages","related_advisories":[]},{"uuid":"MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWNtZmctODd2cS1nNWc0","url":"https://github.com/advisories/GHSA-cmfg-87vq-g5g4","title":"Deserialization of untrusted data in FasterXML jackson-databind","description":"A Polymorphic Typing issue was discovered in FasterXML jackson-databind 2.x through 2.9.9. When Default Typing is enabled (either globally or for a specific property) for an externally exposed JSON endpoint and the service has JDOM 1.x or 2.x jar in the classpath, an attacker can send a specifically crafted JSON message that allows them to read arbitrary local files on the server.","origin":"UNSPECIFIED","severity":"MODERATE","published_at":"2019-07-17T15:26:12.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":5.9,"cvss_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","references":["https://nvd.nist.gov/vuln/detail/CVE-2019-12814","https://github.com/FasterXML/jackson-databind/issues/2341","https://access.redhat.com/errata/RHSA-2019:2858","https://access.redhat.com/errata/RHSA-2019:2935","https://access.redhat.com/errata/RHSA-2019:2936","https://access.redhat.com/errata/RHSA-2019:2937","https://access.redhat.com/errata/RHSA-2019:2938","https://access.redhat.com/errata/RHSA-2019:3044","https://access.redhat.com/errata/RHSA-2019:3045","https://access.redhat.com/errata/RHSA-2019:3046","https://access.redhat.com/errata/RHSA-2019:3050","https://access.redhat.com/errata/RHSA-2019:3149","https://access.redhat.com/errata/RHSA-2019:3200","https://access.redhat.com/errata/RHSA-2019:3292","https://access.redhat.com/errata/RHSA-2019:3297","https://lists.apache.org/thread.html/0d4b630d9ee724aee50703397d9d1afa2b2befc9395ba7797d0ccea9@%3Cdev.tomee.apache.org%3E","https://lists.apache.org/thread.html/129da0204c876f746636018751a086cc581e0e07bcdeb3ee22ff5731@%3Cdev.zookeeper.apache.org%3E","https://lists.apache.org/thread.html/15a55e1d837fa686db493137cc0330c7ee1089ed9a9eea7ae7151ef1@%3Cissues.zookeeper.apache.org%3E","https://lists.apache.org/thread.html/1e04d9381c801b31ab28dec813c31c304b2a596b2a3707fa5462c5c0@%3Cnotifications.zookeeper.apache.org%3E","https://lists.apache.org/thread.html/28be28ffd6471d230943a255c36fe196a54ef5afc494a4781d16e37c@%3Cissues.zookeeper.apache.org%3E","https://lists.apache.org/thread.html/2d2a76440becb610b9a9cb49b15eac3934b02c2dbcaacde1000353e4@%3Cdev.tomee.apache.org%3E","https://lists.apache.org/thread.html/2ff264b6a94c5363a35c4c88fa93216f60ec54d1d973ed6b76a9f560@%3Cissues.zookeeper.apache.org%3E","https://lists.apache.org/thread.html/34717424b4d08b74f65c09a083d6dd1cb0763f37a15d6de135998c1d@%3Cdev.tomee.apache.org%3E","https://lists.apache.org/thread.html/3f99ae8dcdbd69438cb733d745ee3ad5e852068490719a66509b4592@%3Ccommits.cassandra.apache.org%3E","https://lists.apache.org/thread.html/4b832d1327703d6b287a6d223307f8f884d798821209a10647e93324@%3Cnotifications.zookeeper.apache.org%3E","https://lists.apache.org/thread.html/519eb0fd45642dcecd9ff74cb3e71c20a4753f7d82e2f07864b5108f@%3Cdev.drill.apache.org%3E","https://lists.apache.org/thread.html/56c8042873595b8c863054c7bfccab4bf2c01c6f5abedae249d914b9@%3Cdev.tomee.apache.org%3E","https://lists.apache.org/thread.html/5ecc333113b139429f4f05000d4aa2886974d4df3269c1dd990bb319@%3Cdev.tomee.apache.org%3E","https://lists.apache.org/thread.html/5fc0e16b7af2590bf1e97c76c136291c4fdb244ee63c65c485c9a7a1@%3Cdev.tomee.apache.org%3E","https://lists.apache.org/thread.html/71f9ffd92410a889e27b95a219eaa843fd820f8550898633d85d4ea3@%3Cissues.zookeeper.apache.org%3E","https://lists.apache.org/thread.html/87e46591de8925f719664a845572d184027258c5a7af0a471b53c77b@%3Cdev.tomee.apache.org%3E","https://lists.apache.org/thread.html/8fe2983f6d9fee0aa737e4bd24483f8f5cf9b938b9adad0c4e79b2a4@%3Cnotifications.zookeeper.apache.org%3E","https://lists.apache.org/thread.html/940b4c3fef002461b89a050935337056d4a036a65ef68e0bbd4621ef@%3Cdev.struts.apache.org%3E","https://lists.apache.org/thread.html/a3ae8a8c5e32c413cd27071d3a204166050bf79ce7f1299f6866338f@%3Cissues.zookeeper.apache.org%3E","https://lists.apache.org/thread.html/a62aa2706105d68f1c02023fe24aaa3c13b4d8a1826181fed07d9682@%3Cnotifications.zookeeper.apache.org%3E","https://lists.apache.org/thread.html/a78239b1f11cddfa86e4edee19064c40b6272214630bfef070c37957@%3Cissues.zookeeper.apache.org%3E","https://lists.apache.org/thread.html/b0656d359c7d40ec9f39c8cc61bca66802ef9a2a12ee199f5b0c1442@%3Cdev.drill.apache.org%3E","https://lists.apache.org/thread.html/b0a2b2cca072650dbd5882719976c3d353972c44f6736ddf0ba95209@%3Cissues.zookeeper.apache.org%3E","https://lists.apache.org/thread.html/b148fa2e9ef468c4de00de255dd728b74e2a97d935f8ced31eb41ba2@%3Cnotifications.zookeeper.apache.org%3E","https://lists.apache.org/thread.html/bcce5a9c532b386c68dab2f6b3ce8b0cc9b950ec551766e76391caa3@%3Ccommits.nifi.apache.org%3E","https://lists.apache.org/thread.html/bf20574dbc2db255f1fd489942b5720f675e32a2c4f44eb6a36060cd@%3Ccommits.accumulo.apache.org%3E","https://lists.apache.org/thread.html/e0733058c0366b703e6757d8d2a7a04b943581f659e9c271f0841dfe@%3Cnotifications.geode.apache.org%3E","https://lists.apache.org/thread.html/ee0a051428d2c719acfa297d0854a189ea5e284ef3ed491fa672f4be@%3Cdev.tomee.apache.org%3E","https://lists.apache.org/thread.html/eff7280055fc717ea8129cd28a9dd57b8446d00b36260c1caee10b87@%3Cnotifications.zookeeper.apache.org%3E","https://lists.apache.org/thread.html/f9bc3e55f4e28d1dcd1a69aae6d53e609a758e34d2869b4d798e13cc@%3Cissues.drill.apache.org%3E","https://lists.apache.org/thread.html/rca37935d661f4689cb4119f1b3b224413b22be161b678e6e6ce0c69b@%3Ccommits.nifi.apache.org%3E","https://lists.debian.org/debian-lts-announce/2019/06/msg00019.html","https://www.oracle.com/security-alerts/cpujan2020.html","https://www.oracle.com/security-alerts/cpujul2020.html","https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html","https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html","https://www.oracle.com/security-alerts/cpuoct2020.html","https://github.com/FasterXML/jackson-databind/commit/5f7c69bba07a7155adde130d9dee2e54a54f1fa5","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OVRZDN2T6AZ6DJCZJ3VSIQIVHBVMVWBL","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/TXRVXNRFHJSQWFHPRJQRI5UPMZ63B544","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UKUALE2TUCKEKOHE2D342PQXN4MWCSLC","https://security.netapp.com/advisory/ntap-20190625-0006","https://github.com/advisories/GHSA-cmfg-87vq-g5g4"],"source_kind":"github","identifiers":["GHSA-cmfg-87vq-g5g4","CVE-2019-12814"],"repository_url":"https://github.com/FasterXML/jackson-databind","blast_radius":0.0,"created_at":"2022-12-21T16:13:06.256Z","updated_at":"2026-06-20T05:06:21.688Z","epss_percentage":0.10951,"epss_percentile":0.95326,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWNtZmctODd2cS1nNWc0","html_url":"https://advisories.ecosyste.ms/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWNtZmctODd2cS1nNWc0","packages":[{"ecosystem":"maven","package_name":"com.fasterxml.jackson.core:jackson-databind","versions":[{"first_patched_version":"2.9.9.1","vulnerable_version_range":"\u003e= 2.9.0, \u003c 2.9.9.1"}],"purl":null}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWNtZmctODd2cS1nNWc0/related_packages","related_advisories":[]},{"uuid":"MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXFyN2otaDZnZy1qbWdj","url":"https://github.com/advisories/GHSA-qr7j-h6gg-jmgc","title":"Deserialization of Untrusted Data in jackson-databind","description":"An issue was discovered in FasterXML jackson-databind 2.0.0 through 2.9.5. Use of Jackson default typing along with a gadget class from iBatis allows exfiltration of content. Fixed in 2.7.9.4, 2.8.11.2, and 2.9.6.","origin":"UNSPECIFIED","severity":"CRITICAL","published_at":"2019-07-16T17:42:21.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":9.8,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","references":["https://nvd.nist.gov/vuln/detail/CVE-2018-11307","https://access.redhat.com/errata/RHSA-2019:0782","https://github.com/FasterXML/jackson-databind/issues/2032","https://medium.com/@cowtowncoder/on-jackson-cves-dont-panic-here-is-what-you-need-to-know-54cd0d6e8062","https://nvd.nist.gov/vuln/detail/CVE-2017-7525","https://access.redhat.com/errata/RHSA-2019:1822","https://access.redhat.com/errata/RHSA-2019:1823","https://access.redhat.com/errata/RHSA-2019:2804","https://access.redhat.com/errata/RHSA-2019:2858","https://access.redhat.com/errata/RHSA-2019:3002","https://access.redhat.com/errata/RHSA-2019:3140","https://access.redhat.com/errata/RHSA-2019:3149","https://access.redhat.com/errata/RHSA-2019:3892","https://access.redhat.com/errata/RHSA-2019:4037","https://lists.apache.org/thread.html/519eb0fd45642dcecd9ff74cb3e71c20a4753f7d82e2f07864b5108f@%3Cdev.drill.apache.org%3E","https://lists.apache.org/thread.html/7fcf88aff0d1deaa5c3c7be8d58c05ad7ad5da94b59065d8e7c50c5d@%3Cissues.lucene.apache.org%3E","https://lists.apache.org/thread.html/b0656d359c7d40ec9f39c8cc61bca66802ef9a2a12ee199f5b0c1442@%3Cdev.drill.apache.org%3E","https://lists.apache.org/thread.html/f9bc3e55f4e28d1dcd1a69aae6d53e609a758e34d2869b4d798e13cc@%3Cissues.drill.apache.org%3E","https://www.oracle.com/security-alerts/cpuapr2020.html","https://www.oracle.com/security-alerts/cpujan2020.html","https://www.oracle.com/security-alerts/cpuoct2020.html","https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html","https://github.com/FasterXML/jackson-databind/commit/051bd5e447fbc9539e12a4fe90eb989dba0c656","https://github.com/FasterXML/jackson-databind/commit/27b4defc270454dea6842bd9279f17387eceb73","https://github.com/FasterXML/jackson-databind/commit/78e78738d69adcb59fdac9fc12d9053ce8809f3d","https://github.com/advisories/GHSA-qr7j-h6gg-jmgc"],"source_kind":"github","identifiers":["GHSA-qr7j-h6gg-jmgc","CVE-2018-11307"],"repository_url":"https://github.com/FasterXML/jackson-databind","blast_radius":0.0,"created_at":"2022-12-21T16:13:06.122Z","updated_at":"2026-06-20T04:08:16.968Z","epss_percentage":0.05683,"epss_percentile":0.92001,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXFyN2otaDZnZy1qbWdj","html_url":"https://advisories.ecosyste.ms/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXFyN2otaDZnZy1qbWdj","packages":[{"ecosystem":"maven","package_name":"com.fasterxml.jackson.core:jackson-databind","versions":[{"first_patched_version":"2.8.11.2","vulnerable_version_range":"\u003e= 2.8.0, \u003c= 2.8.11.1"},{"first_patched_version":"2.7.9.4","vulnerable_version_range":"\u003e= 2.0.0, \u003c= 2.7.9.3"},{"first_patched_version":"2.9.6","vulnerable_version_range":"\u003e= 2.9.0, \u003c 2.9.6"}],"purl":null}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXFyN2otaDZnZy1qbWdj/related_packages","related_advisories":[]},{"uuid":"MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLW1waDQtdmhyeC1tdjY3","url":"https://github.com/advisories/GHSA-mph4-vhrx-mv67","title":"Deserialization of Untrusted Data in FasterXML jackson-databind","description":"FasterXML jackson-databind 2.x before 2.9.9.1 might allow attackers to have a variety of impacts by leveraging failure to block the logback-core class from polymorphic deserialization. Depending on the classpath content, remote code execution may be possible.","origin":"UNSPECIFIED","severity":"MODERATE","published_at":"2019-07-05T21:07:27.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":5.9,"cvss_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","references":["https://nvd.nist.gov/vuln/detail/CVE-2019-12384","https://doyensec.com/research.html","https://github.com/FasterXML/jackson-databind/compare/74b90a4...a977aad","https://lists.debian.org/debian-lts-announce/2019/06/msg00019.html","https://access.redhat.com/errata/RHSA-2019:1820","https://access.redhat.com/errata/RHSA-2019:2720","https://access.redhat.com/errata/RHSA-2019:2858","https://access.redhat.com/errata/RHSA-2019:2935","https://access.redhat.com/errata/RHSA-2019:2936","https://access.redhat.com/errata/RHSA-2019:2937","https://access.redhat.com/errata/RHSA-2019:2938","https://access.redhat.com/errata/RHSA-2019:2998","https://access.redhat.com/errata/RHSA-2019:3149","https://access.redhat.com/errata/RHSA-2019:3200","https://access.redhat.com/errata/RHSA-2019:3292","https://access.redhat.com/errata/RHSA-2019:3297","https://access.redhat.com/errata/RHSA-2019:3901","https://access.redhat.com/errata/RHSA-2019:4352","https://blog.doyensec.com/2019/07/22/jackson-gadgets.html","https://lists.apache.org/thread.html/0d4b630d9ee724aee50703397d9d1afa2b2befc9395ba7797d0ccea9@%3Cdev.tomee.apache.org%3E","https://lists.apache.org/thread.html/2d2a76440becb610b9a9cb49b15eac3934b02c2dbcaacde1000353e4@%3Cdev.tomee.apache.org%3E","https://lists.apache.org/thread.html/34717424b4d08b74f65c09a083d6dd1cb0763f37a15d6de135998c1d@%3Cdev.tomee.apache.org%3E","https://lists.apache.org/thread.html/3f99ae8dcdbd69438cb733d745ee3ad5e852068490719a66509b4592@%3Ccommits.cassandra.apache.org%3E","https://lists.apache.org/thread.html/519eb0fd45642dcecd9ff74cb3e71c20a4753f7d82e2f07864b5108f@%3Cdev.drill.apache.org%3E","https://lists.apache.org/thread.html/56c8042873595b8c863054c7bfccab4bf2c01c6f5abedae249d914b9@%3Cdev.tomee.apache.org%3E","https://lists.apache.org/thread.html/5ecc333113b139429f4f05000d4aa2886974d4df3269c1dd990bb319@%3Cdev.tomee.apache.org%3E","https://lists.apache.org/thread.html/5fc0e16b7af2590bf1e97c76c136291c4fdb244ee63c65c485c9a7a1@%3Cdev.tomee.apache.org%3E","https://lists.apache.org/thread.html/87e46591de8925f719664a845572d184027258c5a7af0a471b53c77b@%3Cdev.tomee.apache.org%3E","https://lists.apache.org/thread.html/940b4c3fef002461b89a050935337056d4a036a65ef68e0bbd4621ef@%3Cdev.struts.apache.org%3E","https://lists.apache.org/thread.html/b0656d359c7d40ec9f39c8cc61bca66802ef9a2a12ee199f5b0c1442@%3Cdev.drill.apache.org%3E","https://lists.apache.org/thread.html/bcce5a9c532b386c68dab2f6b3ce8b0cc9b950ec551766e76391caa3@%3Ccommits.nifi.apache.org%3E","https://lists.apache.org/thread.html/e0733058c0366b703e6757d8d2a7a04b943581f659e9c271f0841dfe@%3Cnotifications.geode.apache.org%3E","https://lists.apache.org/thread.html/ee0a051428d2c719acfa297d0854a189ea5e284ef3ed491fa672f4be@%3Cdev.tomee.apache.org%3E","https://lists.apache.org/thread.html/f9bc3e55f4e28d1dcd1a69aae6d53e609a758e34d2869b4d798e13cc@%3Cissues.drill.apache.org%3E","https://lists.apache.org/thread.html/rca37935d661f4689cb4119f1b3b224413b22be161b678e6e6ce0c69b@%3Ccommits.nifi.apache.org%3E","https://seclists.org/bugtraq/2019/Oct/6","https://www.debian.org/security/2019/dsa-4542","https://www.oracle.com/security-alerts/cpuapr2020.html","https://www.oracle.com/security-alerts/cpujan2020.html","https://www.oracle.com/security-alerts/cpujul2020.html","https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html","https://www.oracle.com/security-alerts/cpuoct2020.html","https://github.com/FasterXML/jackson-databind/issues/2334","https://github.com/FasterXML/jackson-databind/commit/c9ef4a10d6f6633cf470d6a469514b68fa2be234","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OVRZDN2T6AZ6DJCZJ3VSIQIVHBVMVWBL","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/TXRVXNRFHJSQWFHPRJQRI5UPMZ63B544","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UKUALE2TUCKEKOHE2D342PQXN4MWCSLC","https://security.netapp.com/advisory/ntap-20190703-0002","https://github.com/advisories/GHSA-mph4-vhrx-mv67"],"source_kind":"github","identifiers":["GHSA-mph4-vhrx-mv67","CVE-2019-12384"],"repository_url":"https://github.com/FasterXML/jackson-databind","blast_radius":0.0,"created_at":"2022-12-21T16:13:06.245Z","updated_at":"2026-06-20T04:06:14.745Z","epss_percentage":0.45205,"epss_percentile":0.98627,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLW1waDQtdmhyeC1tdjY3","html_url":"https://advisories.ecosyste.ms/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLW1waDQtdmhyeC1tdjY3","packages":[{"ecosystem":"maven","package_name":"com.fasterxml.jackson.core:jackson-databind","versions":[{"first_patched_version":"2.6.7.3","vulnerable_version_range":"\u003e= 2.0.0, \u003c 2.6.7.3"},{"first_patched_version":"2.7.9.6","vulnerable_version_range":"\u003e= 2.7.0, \u003c 2.7.9.6"},{"first_patched_version":"2.8.11.4","vulnerable_version_range":"\u003e= 2.8.0, \u003c 2.8.11.4"},{"first_patched_version":"2.9.9.1","vulnerable_version_range":"\u003e= 2.9.0, \u003c 2.9.9.1"}],"purl":null}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLW1waDQtdmhyeC1tdjY3/related_packages","related_advisories":[]},{"uuid":"MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTV3dzktajgzbS1xN3F4","url":"https://github.com/advisories/GHSA-5ww9-j83m-q7qx","title":"Information exposure in FasterXML jackson-databind","description":"A Polymorphic Typing issue was discovered in FasterXML jackson-databind 2.x before 2.9.9. When Default Typing is enabled (either globally or for a specific property) for an externally exposed JSON endpoint, the service has the mysql-connector-java jar (8.0.14 or earlier) in the classpath, and an attacker can host a crafted MySQL server reachable by the victim, an attacker can send a crafted JSON message that allows them to read arbitrary local files on the server. This occurs because of missing com.mysql.cj.jdbc.admin.MiniAdmin validation.","origin":"UNSPECIFIED","severity":"HIGH","published_at":"2019-05-23T09:32:24.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":7.5,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","references":["https://nvd.nist.gov/vuln/detail/CVE-2019-12086","https://github.com/FasterXML/jackson-databind/issues/2326","https://github.com/FasterXML/jackson/wiki/Jackson-Release-2.9.9","https://medium.com/@cowtowncoder/on-jackson-cves-dont-panic-here-is-what-you-need-to-know-54cd0d6e8062","https://access.redhat.com/errata/RHSA-2019:2858","https://access.redhat.com/errata/RHSA-2019:2935","https://access.redhat.com/errata/RHSA-2019:2936","https://access.redhat.com/errata/RHSA-2019:2937","https://access.redhat.com/errata/RHSA-2019:2938","https://access.redhat.com/errata/RHSA-2019:2998","https://access.redhat.com/errata/RHSA-2019:3044","https://access.redhat.com/errata/RHSA-2019:3045","https://access.redhat.com/errata/RHSA-2019:3046","https://access.redhat.com/errata/RHSA-2019:3050","https://access.redhat.com/errata/RHSA-2019:3149","https://access.redhat.com/errata/RHSA-2019:3200","https://lists.apache.org/thread.html/3f99ae8dcdbd69438cb733d745ee3ad5e852068490719a66509b4592@%3Ccommits.cassandra.apache.org%3E","https://lists.apache.org/thread.html/519eb0fd45642dcecd9ff74cb3e71c20a4753f7d82e2f07864b5108f@%3Cdev.drill.apache.org%3E","https://lists.apache.org/thread.html/88cd25375805950ae7337e669b0cb0eeda98b9604c1b8d806dccbad2@%3Creviews.spark.apache.org%3E","https://lists.apache.org/thread.html/b0656d359c7d40ec9f39c8cc61bca66802ef9a2a12ee199f5b0c1442@%3Cdev.drill.apache.org%3E","https://lists.apache.org/thread.html/bcce5a9c532b386c68dab2f6b3ce8b0cc9b950ec551766e76391caa3@%3Ccommits.nifi.apache.org%3E","https://lists.apache.org/thread.html/f9bc3e55f4e28d1dcd1a69aae6d53e609a758e34d2869b4d798e13cc@%3Cissues.drill.apache.org%3E","https://lists.apache.org/thread.html/r204ba2a9ea750f38d789d2bb429cc0925ad6133deea7cbc3001d96b5@%3Csolr-user.lucene.apache.org%3E","https://lists.apache.org/thread.html/rca37935d661f4689cb4119f1b3b224413b22be161b678e6e6ce0c69b@%3Ccommits.nifi.apache.org%3E","https://lists.debian.org/debian-lts-announce/2019/05/msg00030.html","https://seclists.org/bugtraq/2019/May/68","https://www.debian.org/security/2019/dsa-4452","https://www.oracle.com/security-alerts/cpuapr2020.html","https://www.oracle.com/security-alerts/cpujan2020.html","https://www.oracle.com/security-alerts/cpujul2020.html","https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html","https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html","https://lists.apache.org/thread.html/rda99599896c3667f2cc9e9d34c7b6ef5d2bbed1f4801e1d75a2b0679@%3Ccommits.nifi.apache.org%3E","https://www.oracle.com/security-alerts/cpuApr2021.html","https://www.oracle.com/security-alerts/cpuoct2020.html","https://www.oracle.com/security-alerts/cpuapr2022.html","https://web.archive.org/web/20200227030031/http://www.securityfocus.com/bid/109227","https://github.com/FasterXML/jackson-databind/commit/efc3c0d02f4743dbaa6d1b9c466772a2f13d966b","https://github.com/FasterXML/jackson-databind/commit/dda513bd7251b4f32b7b60b1c13740e3b5a43024","https://github.com/FasterXML/jackson-databind/commit/d30f036208ab1c60bd5ce429cb4f7f1a3e5682e8","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OVRZDN2T6AZ6DJCZJ3VSIQIVHBVMVWBL","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/TXRVXNRFHJSQWFHPRJQRI5UPMZ63B544","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UKUALE2TUCKEKOHE2D342PQXN4MWCSLC","https://security.netapp.com/advisory/ntap-20190530-0003","https://web.archive.org/web/20200808181049/http://russiansecurity.expert/2016/04/20/mysql-connect-file-read","https://github.com/advisories/GHSA-5ww9-j83m-q7qx"],"source_kind":"github","identifiers":["GHSA-5ww9-j83m-q7qx","CVE-2019-12086"],"repository_url":"https://github.com/FasterXML/jackson-databind","blast_radius":0.0,"created_at":"2022-12-21T16:13:30.093Z","updated_at":"2026-06-20T04:06:14.744Z","epss_percentage":0.21949,"epss_percentile":0.97348,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTV3dzktajgzbS1xN3F4","html_url":"https://advisories.ecosyste.ms/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTV3dzktajgzbS1xN3F4","packages":[{"ecosystem":"maven","package_name":"com.fasterxml.jackson.core:jackson-databind","versions":[{"first_patched_version":"2.6.7.3","vulnerable_version_range":"\u003e= 2.0.0, \u003c 2.6.7.3"},{"first_patched_version":"2.7.9.6","vulnerable_version_range":"\u003e= 2.7.0, \u003c 2.7.9.6"},{"first_patched_version":"2.8.11.4","vulnerable_version_range":"\u003e= 2.8.0, \u003c 2.8.11.4"},{"first_patched_version":"2.9.9","vulnerable_version_range":"\u003e= 2.9.0, \u003c 2.9.9"}],"purl":null}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTV3dzktajgzbS1xN3F4/related_packages","related_advisories":[]},{"uuid":"MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWNqamYtOTRmZi00M3c3","url":"https://github.com/advisories/GHSA-cjjf-94ff-43w7","title":"jackson-databind Deserialization of Untrusted Data vulnerability","description":"An issue was discovered in FasterXML jackson-databind prior to 2.7.9.4, 2.8.11.2, and 2.9.6. When Default Typing is enabled (either globally or for a specific property), the service has the Jodd-db jar (for database access for the Jodd framework) in the classpath, and an attacker can provide an LDAP service to access, it is possible to make the service execute a malicious payload.","origin":"UNSPECIFIED","severity":"HIGH","published_at":"2019-03-25T18:03:09.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":7.5,"cvss_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","references":["https://nvd.nist.gov/vuln/detail/CVE-2018-12022","https://github.com/FasterXML/jackson-databind/issues/2052","https://github.com/FasterXML/jackson-databind/commit/28badf7ef60ac3e7ef151cd8e8ec010b8479226a","https://access.redhat.com/errata/RHBA-2019:0959","https://access.redhat.com/errata/RHSA-2019:0782","https://access.redhat.com/errata/RHSA-2019:0877","https://access.redhat.com/errata/RHSA-2019:1106","https://access.redhat.com/errata/RHSA-2019:1107","https://access.redhat.com/errata/RHSA-2019:1108","https://access.redhat.com/errata/RHSA-2019:1140","https://access.redhat.com/errata/RHSA-2019:1782","https://access.redhat.com/errata/RHSA-2019:1797","https://access.redhat.com/errata/RHSA-2019:1822","https://access.redhat.com/errata/RHSA-2019:1823","https://access.redhat.com/errata/RHSA-2019:2804","https://access.redhat.com/errata/RHSA-2019:2858","https://access.redhat.com/errata/RHSA-2019:3002","https://access.redhat.com/errata/RHSA-2019:3140","https://access.redhat.com/errata/RHSA-2019:3149","https://access.redhat.com/errata/RHSA-2019:3892","https://access.redhat.com/errata/RHSA-2019:4037","https://bugzilla.redhat.com/show_bug.cgi?id=1671098","https://github.com/advisories/GHSA-cjjf-94ff-43w7","https://lists.apache.org/thread.html/519eb0fd45642dcecd9ff74cb3e71c20a4753f7d82e2f07864b5108f@%3Cdev.drill.apache.org%3E","https://lists.apache.org/thread.html/7fcf88aff0d1deaa5c3c7be8d58c05ad7ad5da94b59065d8e7c50c5d@%3Cissues.lucene.apache.org%3E","https://lists.apache.org/thread.html/b0656d359c7d40ec9f39c8cc61bca66802ef9a2a12ee199f5b0c1442@%3Cdev.drill.apache.org%3E","https://lists.apache.org/thread.html/f9bc3e55f4e28d1dcd1a69aae6d53e609a758e34d2869b4d798e13cc@%3Cissues.drill.apache.org%3E","https://medium.com/@cowtowncoder/on-jackson-cves-dont-panic-here-is-what-you-need-to-know-54cd0d6e8062","https://seclists.org/bugtraq/2019/May/68","https://www.blackhat.com/docs/us-16/materials/us-16-Munoz-A-Journey-From-JNDI-LDAP-Manipulation-To-RCE.pdf","https://www.debian.org/security/2019/dsa-4452","https://www.oracle.com/security-alerts/cpuapr2020.html","https://www.oracle.com/security-alerts/cpuoct2020.html","https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html","https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html","http://www.securityfocus.com/bid/107585","https://github.com/FasterXML/jackson-databind/commit/bf261d404c2f79fd3406237710d40ebb03c99d84","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZEDLDUYBSTDY4GWDBUXGJNS2RFYTFVRC","https://security.netapp.com/advisory/ntap-20190530-0003","https://github.com/FasterXML/jackson-databind/commit/7487cf7eb14be2f65a1eb108e8629c07ef45e0a"],"source_kind":"github","identifiers":["GHSA-cjjf-94ff-43w7","CVE-2018-12022"],"repository_url":"https://github.com/FasterXML/jackson-databind","blast_radius":0.0,"created_at":"2022-12-21T16:12:59.019Z","updated_at":"2026-06-20T04:07:56.736Z","epss_percentage":0.07289,"epss_percentile":0.93571,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWNqamYtOTRmZi00M3c3","html_url":"https://advisories.ecosyste.ms/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWNqamYtOTRmZi00M3c3","packages":[{"ecosystem":"maven","package_name":"com.fasterxml.jackson.core:jackson-databind","versions":[{"first_patched_version":"2.8.11.2","vulnerable_version_range":"\u003e= 2.8.0, \u003c= 2.8.11.1"},{"first_patched_version":"2.7.9.4","vulnerable_version_range":"\u003c= 2.7.9.3"},{"first_patched_version":"2.9.6","vulnerable_version_range":"\u003e= 2.9.0, \u003c 2.9.6"}],"purl":null}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWNqamYtOTRmZi00M3c3/related_packages","related_advisories":[]},{"uuid":"MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTRncTUtY2g1Ny1jMm1n","url":"https://github.com/advisories/GHSA-4gq5-ch57-c2mg","title":"Arbitrary Code Execution in jackson-databind","description":"FasterXML jackson-databind 2.x before 2.9.7, 2.8.11.3, and 2.7.9.5 might allow remote attackers to execute arbitrary code by leveraging failure to block the blaze-ds-opt and blaze-ds-core classes from polymorphic deserialization.","origin":"UNSPECIFIED","severity":"CRITICAL","published_at":"2019-01-04T19:09:49.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":9.8,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","references":["https://nvd.nist.gov/vuln/detail/CVE-2018-14719","https://github.com/FasterXML/jackson-databind/issues/2097","https://github.com/FasterXML/jackson-databind/commit/87d29af25e82a249ea15858e2d4ecbf64091db44","https://access.redhat.com/errata/RHBA-2019:0959","https://access.redhat.com/errata/RHSA-2019:0782","https://access.redhat.com/errata/RHSA-2019:0877","https://access.redhat.com/errata/RHSA-2019:1782","https://access.redhat.com/errata/RHSA-2019:1797","https://access.redhat.com/errata/RHSA-2019:1822","https://access.redhat.com/errata/RHSA-2019:1823","https://access.redhat.com/errata/RHSA-2019:2804","https://access.redhat.com/errata/RHSA-2019:2858","https://access.redhat.com/errata/RHSA-2019:3002","https://access.redhat.com/errata/RHSA-2019:3140","https://access.redhat.com/errata/RHSA-2019:3149","https://access.redhat.com/errata/RHSA-2019:3892","https://access.redhat.com/errata/RHSA-2019:4037","https://github.com/FasterXML/jackson/wiki/Jackson-Release-2.9.7","https://lists.apache.org/thread.html/519eb0fd45642dcecd9ff74cb3e71c20a4753f7d82e2f07864b5108f@%3Cdev.drill.apache.org%3E","https://lists.apache.org/thread.html/b0656d359c7d40ec9f39c8cc61bca66802ef9a2a12ee199f5b0c1442@%3Cdev.drill.apache.org%3E","https://lists.apache.org/thread.html/f9bc3e55f4e28d1dcd1a69aae6d53e609a758e34d2869b4d798e13cc@%3Cissues.drill.apache.org%3E","https://lists.apache.org/thread.html/ff8dcfe29377088ab655fda9d585dccd5b1f07fabd94ae84fd60a7f8@%3Ccommits.pulsar.apache.org%3E","https://lists.apache.org/thread.html/rf1bbc0ea4a9f014cf94df9a12a6477d24a27f52741dbc87f2fd52ff2@%3Cissues.geode.apache.org%3E","https://lists.debian.org/debian-lts-announce/2019/03/msg00005.html","https://seclists.org/bugtraq/2019/May/68","https://security.netapp.com/advisory/ntap-20190530-0003/","https://www.debian.org/security/2019/dsa-4452","https://www.oracle.com/security-alerts/cpuapr2020.html","https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html","https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html","https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html","https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html","https://github.com/advisories/GHSA-4gq5-ch57-c2mg"],"source_kind":"github","identifiers":["GHSA-4gq5-ch57-c2mg","CVE-2018-14719"],"repository_url":"https://github.com/FasterXML/jackson-databind","blast_radius":0.0,"created_at":"2022-12-21T16:12:59.037Z","updated_at":"2026-06-20T04:07:56.735Z","epss_percentage":0.09682,"epss_percentile":0.94889,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTRncTUtY2g1Ny1jMm1n","html_url":"https://advisories.ecosyste.ms/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTRncTUtY2g1Ny1jMm1n","packages":[{"ecosystem":"maven","package_name":"com.fasterxml.jackson.core:jackson-databind","versions":[{"first_patched_version":"2.7.9.5","vulnerable_version_range":"\u003e= 2.0.0, \u003c= 2.7.9.4"},{"first_patched_version":"2.8.11.3","vulnerable_version_range":"\u003e= 2.8.0, \u003c= 2.8.11.2"},{"first_patched_version":"2.9.7","vulnerable_version_range":"\u003e= 2.9.0, \u003c 2.9.7"}],"purl":null}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTRncTUtY2g1Ny1jMm1n/related_packages","related_advisories":[]},{"uuid":"MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXgydzUtNW0yZy03aDVt","url":"https://github.com/advisories/GHSA-x2w5-5m2g-7h5m","title":"XML External Entity Reference (XXE) in jackson-databind","description":"FasterXML jackson-databind 2.x before 2.9.7 might allow attackers to conduct external XML entity (XXE) attacks by leveraging failure to block unspecified JDK classes from polymorphic deserialization.","origin":"UNSPECIFIED","severity":"CRITICAL","published_at":"2019-01-04T19:09:46.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":9.8,"cvss_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","references":["https://nvd.nist.gov/vuln/detail/CVE-2018-14720","https://github.com/FasterXML/jackson-databind/issues/2097","https://github.com/FasterXML/jackson-databind/commit/87d29af25e82a249ea15858e2d4ecbf64091db44","https://access.redhat.com/errata/RHBA-2019:0959","https://access.redhat.com/errata/RHSA-2019:0782","https://access.redhat.com/errata/RHSA-2019:1106","https://access.redhat.com/errata/RHSA-2019:1107","https://access.redhat.com/errata/RHSA-2019:1108","https://access.redhat.com/errata/RHSA-2019:1140","https://access.redhat.com/errata/RHSA-2019:1822","https://access.redhat.com/errata/RHSA-2019:1823","https://access.redhat.com/errata/RHSA-2019:2858","https://access.redhat.com/errata/RHSA-2019:3149","https://access.redhat.com/errata/RHSA-2019:3892","https://access.redhat.com/errata/RHSA-2019:4037","https://github.com/FasterXML/jackson/wiki/Jackson-Release-2.9.7","https://github.com/advisories/GHSA-x2w5-5m2g-7h5m","https://lists.apache.org/thread.html/519eb0fd45642dcecd9ff74cb3e71c20a4753f7d82e2f07864b5108f@%3Cdev.drill.apache.org%3E","https://lists.apache.org/thread.html/6a78f88716c3c57aa74ec05764a37ab3874769a347805903b393b286@%3Cdev.lucene.apache.org%3E","https://lists.apache.org/thread.html/82b01bfb6787097427ce97cec6a7127e93718bc05d1efd5eaffc228f@%3Cdev.lucene.apache.org%3E","https://lists.apache.org/thread.html/b0656d359c7d40ec9f39c8cc61bca66802ef9a2a12ee199f5b0c1442@%3Cdev.drill.apache.org%3E","https://lists.apache.org/thread.html/ba973114605d936be276ee6ce09dfbdbf78aa56f6cdc6e79bfa7b8df@%3Cdev.lucene.apache.org%3E","https://lists.apache.org/thread.html/f9bc3e55f4e28d1dcd1a69aae6d53e609a758e34d2869b4d798e13cc@%3Cissues.drill.apache.org%3E","https://lists.apache.org/thread.html/ff8dcfe29377088ab655fda9d585dccd5b1f07fabd94ae84fd60a7f8@%3Ccommits.pulsar.apache.org%3E","https://lists.apache.org/thread.html/rf1bbc0ea4a9f014cf94df9a12a6477d24a27f52741dbc87f2fd52ff2@%3Cissues.geode.apache.org%3E","https://lists.debian.org/debian-lts-announce/2019/03/msg00005.html","https://seclists.org/bugtraq/2019/May/68","https://security.netapp.com/advisory/ntap-20190530-0003/","https://www.debian.org/security/2019/dsa-4452","https://www.oracle.com/security-alerts/cpuapr2020.html","https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html","https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html","https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html","https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html"],"source_kind":"github","identifiers":["GHSA-x2w5-5m2g-7h5m","CVE-2018-14720"],"repository_url":"https://github.com/FasterXML/jackson-databind","blast_radius":0.0,"created_at":"2022-12-21T16:12:59.586Z","updated_at":"2026-06-20T05:11:34.702Z","epss_percentage":0.07524,"epss_percentile":0.93716,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXgydzUtNW0yZy03aDVt","html_url":"https://advisories.ecosyste.ms/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXgydzUtNW0yZy03aDVt","packages":[{"ecosystem":"maven","package_name":"com.fasterxml.jackson.core:jackson-databind","versions":[{"first_patched_version":"2.9.7","vulnerable_version_range":"\u003e= 2.9.0, \u003c 2.9.7"}],"purl":null}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXgydzUtNW0yZy03aDVt/related_packages","related_advisories":[]},{"uuid":"MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTlteGYtZzN4Ni13djc0","url":"https://github.com/advisories/GHSA-9mxf-g3x6-wv74","title":"Server-Side Request Forgery (SSRF) in jackson-databind","description":"FasterXML jackson-databind 2.x before 2.9.7 might allow remote attackers to conduct server-side request forgery (SSRF) attacks by leveraging failure to block the axis2-jaxws class from polymorphic deserialization.","origin":"UNSPECIFIED","severity":"CRITICAL","published_at":"2019-01-04T19:07:06.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":10.0,"cvss_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","references":["https://nvd.nist.gov/vuln/detail/CVE-2018-14721","https://github.com/FasterXML/jackson-databind/issues/2097","https://github.com/FasterXML/jackson-databind/commit/87d29af25e82a249ea15858e2d4ecbf64091db44","https://access.redhat.com/errata/RHBA-2019:0959","https://access.redhat.com/errata/RHSA-2019:0782","https://access.redhat.com/errata/RHSA-2019:1106","https://access.redhat.com/errata/RHSA-2019:1107","https://access.redhat.com/errata/RHSA-2019:1108","https://access.redhat.com/errata/RHSA-2019:1140","https://access.redhat.com/errata/RHSA-2019:1822","https://access.redhat.com/errata/RHSA-2019:1823","https://access.redhat.com/errata/RHSA-2019:2858","https://access.redhat.com/errata/RHSA-2019:3149","https://access.redhat.com/errata/RHSA-2019:3892","https://access.redhat.com/errata/RHSA-2019:4037","https://github.com/FasterXML/jackson/wiki/Jackson-Release-2.9.7","https://github.com/advisories/GHSA-9mxf-g3x6-wv74","https://lists.apache.org/thread.html/519eb0fd45642dcecd9ff74cb3e71c20a4753f7d82e2f07864b5108f@%3Cdev.drill.apache.org%3E","https://lists.apache.org/thread.html/b0656d359c7d40ec9f39c8cc61bca66802ef9a2a12ee199f5b0c1442@%3Cdev.drill.apache.org%3E","https://lists.apache.org/thread.html/f9bc3e55f4e28d1dcd1a69aae6d53e609a758e34d2869b4d798e13cc@%3Cissues.drill.apache.org%3E","https://lists.apache.org/thread.html/ff8dcfe29377088ab655fda9d585dccd5b1f07fabd94ae84fd60a7f8@%3Ccommits.pulsar.apache.org%3E","https://lists.apache.org/thread.html/rf1bbc0ea4a9f014cf94df9a12a6477d24a27f52741dbc87f2fd52ff2@%3Cissues.geode.apache.org%3E","https://lists.debian.org/debian-lts-announce/2019/03/msg00005.html","https://seclists.org/bugtraq/2019/May/68","https://security.netapp.com/advisory/ntap-20190530-0003/","https://www.debian.org/security/2019/dsa-4452","https://www.oracle.com/security-alerts/cpuapr2020.html","https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html","https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html","https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html","https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html"],"source_kind":"github","identifiers":["GHSA-9mxf-g3x6-wv74","CVE-2018-14721"],"repository_url":"https://github.com/FasterXML/jackson-databind","blast_radius":0.0,"created_at":"2022-12-21T16:12:59.254Z","updated_at":"2026-06-20T05:11:34.704Z","epss_percentage":0.10458,"epss_percentile":0.95166,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTlteGYtZzN4Ni13djc0","html_url":"https://advisories.ecosyste.ms/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTlteGYtZzN4Ni13djc0","packages":[{"ecosystem":"maven","package_name":"com.fasterxml.jackson.core:jackson-databind","versions":[{"first_patched_version":"2.9.7","vulnerable_version_range":"\u003e= 2.9.0, \u003c 2.9.7"}],"purl":null}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTlteGYtZzN4Ni13djc0/related_packages","related_advisories":[]},{"uuid":"MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWM4aG0tN2hwcS03amhn","url":"https://github.com/advisories/GHSA-c8hm-7hpq-7jhg","title":"com.fasterxml.jackson.core:jackson-databind vulnerable to Deserialization of Untrusted Data","description":"FasterXML jackson-databind 2.x before 2.9.8 might allow attackers to have unspecified impact by leveraging failure to block the jboss-common-core class from polymorphic deserialization.","origin":"UNSPECIFIED","severity":"CRITICAL","published_at":"2019-01-04T19:07:03.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":9.8,"cvss_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","references":["https://nvd.nist.gov/vuln/detail/CVE-2018-19362","https://github.com/FasterXML/jackson-databind/issues/2186","https://github.com/FasterXML/jackson-databind/commit/42912cac4753f3f718ece875e4d486f8264c2f2b","https://access.redhat.com/errata/RHBA-2019:0959","https://access.redhat.com/errata/RHSA-2019:0782","https://access.redhat.com/errata/RHSA-2019:0877","https://access.redhat.com/errata/RHSA-2019:1782","https://access.redhat.com/errata/RHSA-2019:1797","https://access.redhat.com/errata/RHSA-2019:1822","https://access.redhat.com/errata/RHSA-2019:1823","https://access.redhat.com/errata/RHSA-2019:2804","https://access.redhat.com/errata/RHSA-2019:2858","https://access.redhat.com/errata/RHSA-2019:3002","https://access.redhat.com/errata/RHSA-2019:3140","https://access.redhat.com/errata/RHSA-2019:3149","https://access.redhat.com/errata/RHSA-2019:3892","https://access.redhat.com/errata/RHSA-2019:4037","https://github.com/FasterXML/jackson/wiki/Jackson-Release-2.9.8","https://github.com/advisories/GHSA-c8hm-7hpq-7jhg","https://issues.apache.org/jira/browse/TINKERPOP-2121","https://lists.apache.org/thread.html/37e1ed724a1b0e5d191d98c822c426670bdfde83804567131847d2a3@%3Cdevnull.infra.apache.org%3E","https://lists.apache.org/thread.html/519eb0fd45642dcecd9ff74cb3e71c20a4753f7d82e2f07864b5108f@%3Cdev.drill.apache.org%3E","https://lists.apache.org/thread.html/b0656d359c7d40ec9f39c8cc61bca66802ef9a2a12ee199f5b0c1442@%3Cdev.drill.apache.org%3E","https://lists.apache.org/thread.html/bcce5a9c532b386c68dab2f6b3ce8b0cc9b950ec551766e76391caa3@%3Ccommits.nifi.apache.org%3E","https://lists.apache.org/thread.html/c70da3cb6e3f03e0ad8013e38b6959419d866c4a7c80fdd34b73f25c@%3Ccommits.pulsar.apache.org%3E","https://lists.apache.org/thread.html/f9bc3e55f4e28d1dcd1a69aae6d53e609a758e34d2869b4d798e13cc@%3Cissues.drill.apache.org%3E","https://lists.apache.org/thread.html/ff8dcfe29377088ab655fda9d585dccd5b1f07fabd94ae84fd60a7f8@%3Ccommits.pulsar.apache.org%3E","https://lists.apache.org/thread.html/r1b103833cb5bc8466e24ff0ecc5e75b45a705334ab6a444e64e840a0@%3Cissues.bookkeeper.apache.org%3E","https://lists.apache.org/thread.html/rca37935d661f4689cb4119f1b3b224413b22be161b678e6e6ce0c69b@%3Ccommits.nifi.apache.org%3E","https://lists.apache.org/thread.html/rf1bbc0ea4a9f014cf94df9a12a6477d24a27f52741dbc87f2fd52ff2@%3Cissues.geode.apache.org%3E","https://lists.debian.org/debian-lts-announce/2019/03/msg00005.html","https://seclists.org/bugtraq/2019/May/68","https://www.debian.org/security/2019/dsa-4452","https://www.oracle.com/security-alerts/cpuapr2020.html","https://www.oracle.com/security-alerts/cpujan2020.html","https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html","https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html","https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html","http://www.securityfocus.com/bid/107985","https://github.com/FasterXML/jackson-databind/commit/72cd4025a229fb28ec133235003dd4616f70afaa","https://security.netapp.com/advisory/ntap-20190530-0003"],"source_kind":"github","identifiers":["GHSA-c8hm-7hpq-7jhg","CVE-2018-19362"],"repository_url":"https://github.com/FasterXML/jackson-databind","blast_radius":0.0,"created_at":"2022-12-21T16:12:59.271Z","updated_at":"2026-06-20T04:06:14.744Z","epss_percentage":0.10599,"epss_percentile":0.95212,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWM4aG0tN2hwcS03amhn","html_url":"https://advisories.ecosyste.ms/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWM4aG0tN2hwcS03amhn","packages":[{"ecosystem":"maven","package_name":"com.fasterxml.jackson.core:jackson-databind","versions":[{"first_patched_version":"2.6.7.3","vulnerable_version_range":"\u003e= 2.0.0, \u003c 2.6.7.3"},{"first_patched_version":"2.7.9.5","vulnerable_version_range":"\u003e= 2.7.0, \u003c= 2.7.9.4"},{"first_patched_version":"2.8.11.3","vulnerable_version_range":"\u003e= 2.8.0, \u003c= 2.8.11.2"},{"first_patched_version":"2.9.8","vulnerable_version_range":"\u003e= 2.9.0, \u003c 2.9.8"}],"purl":null}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWM4aG0tN2hwcS03amhn/related_packages","related_advisories":[]},{"uuid":"MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLW14OXYtZ21oNC1tZ3F3","url":"https://github.com/advisories/GHSA-mx9v-gmh4-mgqw","title":"Deserialization of Untrusted Data in jackson-databind","description":"FasterXML jackson-databind 2.x before 2.9.8 might allow attackers to have unspecified impact by leveraging failure to block the openjpa class from polymorphic deserialization.","origin":"UNSPECIFIED","severity":"CRITICAL","published_at":"2019-01-04T19:07:01.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":9.8,"cvss_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","references":["https://nvd.nist.gov/vuln/detail/CVE-2018-19361","https://github.com/FasterXML/jackson-databind/issues/2186","https://github.com/FasterXML/jackson-databind/commit/42912cac4753f3f718ece875e4d486f8264c2f2b","https://access.redhat.com/errata/RHBA-2019:0959","https://access.redhat.com/errata/RHSA-2019:0782","https://access.redhat.com/errata/RHSA-2019:0877","https://access.redhat.com/errata/RHSA-2019:1782","https://access.redhat.com/errata/RHSA-2019:1797","https://access.redhat.com/errata/RHSA-2019:1822","https://access.redhat.com/errata/RHSA-2019:1823","https://access.redhat.com/errata/RHSA-2019:2804","https://access.redhat.com/errata/RHSA-2019:2858","https://access.redhat.com/errata/RHSA-2019:3002","https://access.redhat.com/errata/RHSA-2019:3140","https://access.redhat.com/errata/RHSA-2019:3149","https://access.redhat.com/errata/RHSA-2019:3892","https://access.redhat.com/errata/RHSA-2019:4037","https://github.com/FasterXML/jackson/wiki/Jackson-Release-2.9.8","https://github.com/advisories/GHSA-mx9v-gmh4-mgqw","https://issues.apache.org/jira/browse/TINKERPOP-2121","https://lists.apache.org/thread.html/37e1ed724a1b0e5d191d98c822c426670bdfde83804567131847d2a3@%3Cdevnull.infra.apache.org%3E","https://lists.apache.org/thread.html/519eb0fd45642dcecd9ff74cb3e71c20a4753f7d82e2f07864b5108f@%3Cdev.drill.apache.org%3E","https://lists.apache.org/thread.html/b0656d359c7d40ec9f39c8cc61bca66802ef9a2a12ee199f5b0c1442@%3Cdev.drill.apache.org%3E","https://lists.apache.org/thread.html/bcce5a9c532b386c68dab2f6b3ce8b0cc9b950ec551766e76391caa3@%3Ccommits.nifi.apache.org%3E","https://lists.apache.org/thread.html/c70da3cb6e3f03e0ad8013e38b6959419d866c4a7c80fdd34b73f25c@%3Ccommits.pulsar.apache.org%3E","https://lists.apache.org/thread.html/f9bc3e55f4e28d1dcd1a69aae6d53e609a758e34d2869b4d798e13cc@%3Cissues.drill.apache.org%3E","https://lists.apache.org/thread.html/ff8dcfe29377088ab655fda9d585dccd5b1f07fabd94ae84fd60a7f8@%3Ccommits.pulsar.apache.org%3E","https://lists.apache.org/thread.html/r1b103833cb5bc8466e24ff0ecc5e75b45a705334ab6a444e64e840a0@%3Cissues.bookkeeper.apache.org%3E","https://lists.apache.org/thread.html/rca37935d661f4689cb4119f1b3b224413b22be161b678e6e6ce0c69b@%3Ccommits.nifi.apache.org%3E","https://lists.apache.org/thread.html/rf1bbc0ea4a9f014cf94df9a12a6477d24a27f52741dbc87f2fd52ff2@%3Cissues.geode.apache.org%3E","https://lists.debian.org/debian-lts-announce/2019/03/msg00005.html","https://seclists.org/bugtraq/2019/May/68","https://security.netapp.com/advisory/ntap-20190530-0003/","https://www.debian.org/security/2019/dsa-4452","https://www.oracle.com/security-alerts/cpuapr2020.html","https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html","https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html","https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html","http://www.securityfocus.com/bid/107985"],"source_kind":"github","identifiers":["GHSA-mx9v-gmh4-mgqw","CVE-2018-19361"],"repository_url":"https://github.com/FasterXML/jackson-databind","blast_radius":0.0,"created_at":"2022-12-21T16:12:59.419Z","updated_at":"2026-06-20T05:11:34.703Z","epss_percentage":0.10599,"epss_percentile":0.95211,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLW14OXYtZ21oNC1tZ3F3","html_url":"https://advisories.ecosyste.ms/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLW14OXYtZ21oNC1tZ3F3","packages":[{"ecosystem":"maven","package_name":"com.fasterxml.jackson.core:jackson-databind","versions":[{"first_patched_version":"2.9.8","vulnerable_version_range":"\u003e= 2.9.0, \u003c 2.9.8"}],"purl":null}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLW14OXYtZ21oNC1tZ3F3/related_packages","related_advisories":[]},{"uuid":"MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWY5aHYtbWc1aC14Y3c5","url":"https://github.com/advisories/GHSA-f9hv-mg5h-xcw9","title":"Deserialization of Untrusted Data in jackson-databind due to polymorphic deserialization","description":"FasterXML jackson-databind 2.x before 2.9.8 might allow attackers to have unspecified impact by leveraging failure to block the axis2-transport-jms class from polymorphic deserialization.","origin":"UNSPECIFIED","severity":"CRITICAL","published_at":"2019-01-04T19:06:57.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":9.8,"cvss_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","references":["https://nvd.nist.gov/vuln/detail/CVE-2018-19360","https://github.com/FasterXML/jackson-databind/issues/2186","https://github.com/FasterXML/jackson-databind/commit/42912cac4753f3f718ece875e4d486f8264c2f2b","https://access.redhat.com/errata/RHBA-2019:0959","https://access.redhat.com/errata/RHSA-2019:0782","https://access.redhat.com/errata/RHSA-2019:0877","https://access.redhat.com/errata/RHSA-2019:1782","https://access.redhat.com/errata/RHSA-2019:1797","https://access.redhat.com/errata/RHSA-2019:1822","https://access.redhat.com/errata/RHSA-2019:1823","https://access.redhat.com/errata/RHSA-2019:2804","https://access.redhat.com/errata/RHSA-2019:2858","https://access.redhat.com/errata/RHSA-2019:3002","https://access.redhat.com/errata/RHSA-2019:3140","https://access.redhat.com/errata/RHSA-2019:3149","https://access.redhat.com/errata/RHSA-2019:3892","https://access.redhat.com/errata/RHSA-2019:4037","https://github.com/FasterXML/jackson/wiki/Jackson-Release-2.9.8","https://github.com/advisories/GHSA-f9hv-mg5h-xcw9","https://issues.apache.org/jira/browse/TINKERPOP-2121","https://lists.apache.org/thread.html/37e1ed724a1b0e5d191d98c822c426670bdfde83804567131847d2a3@%3Cdevnull.infra.apache.org%3E","https://lists.apache.org/thread.html/519eb0fd45642dcecd9ff74cb3e71c20a4753f7d82e2f07864b5108f@%3Cdev.drill.apache.org%3E","https://lists.apache.org/thread.html/b0656d359c7d40ec9f39c8cc61bca66802ef9a2a12ee199f5b0c1442@%3Cdev.drill.apache.org%3E","https://lists.apache.org/thread.html/bcce5a9c532b386c68dab2f6b3ce8b0cc9b950ec551766e76391caa3@%3Ccommits.nifi.apache.org%3E","https://lists.apache.org/thread.html/c70da3cb6e3f03e0ad8013e38b6959419d866c4a7c80fdd34b73f25c@%3Ccommits.pulsar.apache.org%3E","https://lists.apache.org/thread.html/f9bc3e55f4e28d1dcd1a69aae6d53e609a758e34d2869b4d798e13cc@%3Cissues.drill.apache.org%3E","https://lists.apache.org/thread.html/ff8dcfe29377088ab655fda9d585dccd5b1f07fabd94ae84fd60a7f8@%3Ccommits.pulsar.apache.org%3E","https://lists.apache.org/thread.html/r1b103833cb5bc8466e24ff0ecc5e75b45a705334ab6a444e64e840a0@%3Cissues.bookkeeper.apache.org%3E","https://lists.apache.org/thread.html/rca37935d661f4689cb4119f1b3b224413b22be161b678e6e6ce0c69b@%3Ccommits.nifi.apache.org%3E","https://lists.apache.org/thread.html/rf1bbc0ea4a9f014cf94df9a12a6477d24a27f52741dbc87f2fd52ff2@%3Cissues.geode.apache.org%3E","https://lists.debian.org/debian-lts-announce/2019/03/msg00005.html","https://seclists.org/bugtraq/2019/May/68","https://security.netapp.com/advisory/ntap-20190530-0003/","https://www.debian.org/security/2019/dsa-4452","https://www.oracle.com/security-alerts/cpuapr2020.html","https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html","https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html","https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html","http://www.securityfocus.com/bid/107985"],"source_kind":"github","identifiers":["GHSA-f9hv-mg5h-xcw9","CVE-2018-19360"],"repository_url":"https://github.com/FasterXML/jackson-databind","blast_radius":0.0,"created_at":"2022-12-21T16:12:59.288Z","updated_at":"2026-06-20T05:11:34.703Z","epss_percentage":0.10599,"epss_percentile":0.95211,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWY5aHYtbWc1aC14Y3c5","html_url":"https://advisories.ecosyste.ms/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWY5aHYtbWc1aC14Y3c5","packages":[{"ecosystem":"maven","package_name":"com.fasterxml.jackson.core:jackson-databind","versions":[{"first_patched_version":"2.9.8","vulnerable_version_range":"\u003e= 2.9.0, \u003c 2.9.8"}],"purl":null}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWY5aHYtbWc1aC14Y3c5/related_packages","related_advisories":[]},{"uuid":"MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTY0NXAtODhxaC13Mzk4","url":"https://github.com/advisories/GHSA-645p-88qh-w398","title":"Arbitrary Code Execution in jackson-databind","description":"FasterXML jackson-databind 2.x before 2.9.7, 2.8.11.3, 2.7.9.5, and 2.6.7.3 might allow remote attackers to execute arbitrary code by leveraging failure to block the slf4j-ext class from polymorphic deserialization.","origin":"UNSPECIFIED","severity":"CRITICAL","published_at":"2019-01-04T19:06:55.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":9.8,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","references":["https://nvd.nist.gov/vuln/detail/CVE-2018-14718","https://github.com/FasterXML/jackson-databind/issues/2097","https://github.com/FasterXML/jackson-databind/commit/87d29af25e82a249ea15858e2d4ecbf64091db44","https://access.redhat.com/errata/RHBA-2019:0959","https://access.redhat.com/errata/RHSA-2019:0782","https://access.redhat.com/errata/RHSA-2019:0877","https://access.redhat.com/errata/RHSA-2019:1782","https://access.redhat.com/errata/RHSA-2019:1797","https://access.redhat.com/errata/RHSA-2019:1822","https://access.redhat.com/errata/RHSA-2019:1823","https://access.redhat.com/errata/RHSA-2019:2804","https://access.redhat.com/errata/RHSA-2019:2858","https://access.redhat.com/errata/RHSA-2019:3002","https://access.redhat.com/errata/RHSA-2019:3140","https://access.redhat.com/errata/RHSA-2019:3149","https://access.redhat.com/errata/RHSA-2019:3892","https://access.redhat.com/errata/RHSA-2019:4037","https://github.com/FasterXML/jackson/wiki/Jackson-Release-2.9.7","https://github.com/advisories/GHSA-645p-88qh-w398","https://lists.apache.org/thread.html/519eb0fd45642dcecd9ff74cb3e71c20a4753f7d82e2f07864b5108f@%3Cdev.drill.apache.org%3E","https://lists.apache.org/thread.html/6a78f88716c3c57aa74ec05764a37ab3874769a347805903b393b286@%3Cdev.lucene.apache.org%3E","https://lists.apache.org/thread.html/82b01bfb6787097427ce97cec6a7127e93718bc05d1efd5eaffc228f@%3Cdev.lucene.apache.org%3E","https://lists.apache.org/thread.html/b0656d359c7d40ec9f39c8cc61bca66802ef9a2a12ee199f5b0c1442@%3Cdev.drill.apache.org%3E","https://lists.apache.org/thread.html/ba973114605d936be276ee6ce09dfbdbf78aa56f6cdc6e79bfa7b8df@%3Cdev.lucene.apache.org%3E","https://lists.apache.org/thread.html/f9bc3e55f4e28d1dcd1a69aae6d53e609a758e34d2869b4d798e13cc@%3Cissues.drill.apache.org%3E","https://lists.apache.org/thread.html/r1d4a247329a8478073163567bbc8c8cb6b49c6bfc2bf58153a857af1@%3Ccommits.druid.apache.org%3E","https://lists.debian.org/debian-lts-announce/2019/03/msg00005.html","https://seclists.org/bugtraq/2019/May/68","https://security.netapp.com/advisory/ntap-20190530-0003/","https://www.debian.org/security/2019/dsa-4452","https://www.oracle.com/security-alerts/cpuapr2020.html","https://www.oracle.com/security-alerts/cpujan2020.html","https://www.oracle.com/security-alerts/cpuoct2020.html","https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html","https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html","https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html","http://www.securityfocus.com/bid/106601"],"source_kind":"github","identifiers":["GHSA-645p-88qh-w398","CVE-2018-14718"],"repository_url":"https://github.com/FasterXML/jackson-databind","blast_radius":0.0,"created_at":"2022-12-21T16:12:59.028Z","updated_at":"2026-06-20T04:07:55.692Z","epss_percentage":0.12679,"epss_percentile":0.95749,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTY0NXAtODhxaC13Mzk4","html_url":"https://advisories.ecosyste.ms/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTY0NXAtODhxaC13Mzk4","packages":[{"ecosystem":"maven","package_name":"com.fasterxml.jackson.core:jackson-databind","versions":[{"first_patched_version":"2.6.7.3","vulnerable_version_range":"\u003e= 2.0.0, \u003c 2.6.7.3"},{"first_patched_version":"2.7.9.5","vulnerable_version_range":"\u003e= 2.7.0, \u003c= 2.7.9.4"},{"first_patched_version":"2.8.11.3","vulnerable_version_range":"\u003e= 2.8.0, \u003c= 2.8.11.2"},{"first_patched_version":"2.9.7","vulnerable_version_range":"\u003e= 2.9.0, \u003c 2.9.7"}],"purl":null}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTY0NXAtODhxaC13Mzk4/related_packages","related_advisories":[]},{"uuid":"MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXJmeDYtdnA5Zy1yaDd2","url":"https://github.com/advisories/GHSA-rfx6-vp9g-rh7v","title":"jackson-databind vulnerable to remote code execution due to incorrect deserialization and blocklist bypass","description":"FasterXML jackson-databind through 2.8.10 and 2.9.x through 2.9.3 allows unauthenticated remote code execution because of an incomplete fix for the CVE-2017-7525 deserialization flaw. This is exploitable by sending maliciously crafted JSON input to the readValue method of the ObjectMapper, bypassing a blacklist that is ineffective if the Spring libraries are available in the classpath.","origin":"UNSPECIFIED","severity":"CRITICAL","published_at":"2018-10-18T17:42:48.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":9.8,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","references":["https://nvd.nist.gov/vuln/detail/CVE-2017-17485","https://github.com/FasterXML/jackson-databind/issues/1855","https://access.redhat.com/errata/RHSA-2018:0116","https://access.redhat.com/errata/RHSA-2018:0342","https://access.redhat.com/errata/RHSA-2018:0478","https://access.redhat.com/errata/RHSA-2018:0479","https://access.redhat.com/errata/RHSA-2018:0480","https://access.redhat.com/errata/RHSA-2018:0481","https://access.redhat.com/errata/RHSA-2018:1447","https://access.redhat.com/errata/RHSA-2018:1448","https://access.redhat.com/errata/RHSA-2018:1449","https://access.redhat.com/errata/RHSA-2018:1450","https://access.redhat.com/errata/RHSA-2018:1451","https://access.redhat.com/errata/RHSA-2018:2930","https://access.redhat.com/errata/RHSA-2019:1782","https://access.redhat.com/errata/RHSA-2019:1797","https://access.redhat.com/errata/RHSA-2019:2858","https://access.redhat.com/errata/RHSA-2019:3149","https://access.redhat.com/errata/RHSA-2019:3892","https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbhf03902en_us","https://www.debian.org/security/2018/dsa-4114","https://www.oracle.com/security-alerts/cpuoct2020.html","https://github.com/FasterXML/jackson-databind/commit/10fe7f17ea7c8da2a71e7a0c774b420a1d5c1b50","https://github.com/FasterXML/jackson-databind/commit/2235894210c75f624a3d0cd60bfb0434a20a18bf","https://github.com/FasterXML/jackson-databind/commit/459107dccc9b3ea991af3e6ad0953e54b01ef7c1","https://github.com/FasterXML/jackson-databind/commit/4f16f67ebd22c7522fdbb8a7eb87e3026a807d61","https://github.com/FasterXML/jackson-databind/commit/978798382ceb72229e5036aa1442943933d6d171","https://github.com/FasterXML/jackson-databind/commit/bb45fb16709018842f858f1a6e1118676aaa34bd","https://github.com/FasterXML/jackson-databind/commit/eb217dd0f87c5fb471e0668575644aa7eba9a3d3","https://github.com/FasterXML/jackson-databind/commit/f031f27a31625d07922bdd090664c69544200a5d","https://github.com/irsl/jackson-rce-via-spel","https://security.netapp.com/advisory/ntap-20180201-0003","https://web.archive.org/web/20200927162225/http://www.securityfocus.com/archive/1/541652/100/0/threaded","https://github.com/advisories/GHSA-rfx6-vp9g-rh7v"],"source_kind":"github","identifiers":["GHSA-rfx6-vp9g-rh7v","CVE-2017-17485"],"repository_url":"https://github.com/FasterXML/jackson-databind","blast_radius":0.0,"created_at":"2022-12-21T16:13:34.335Z","updated_at":"2026-06-20T05:08:20.446Z","epss_percentage":0.49952,"epss_percentile":0.98755,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXJmeDYtdnA5Zy1yaDd2","html_url":"https://advisories.ecosyste.ms/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXJmeDYtdnA5Zy1yaDd2","packages":[{"ecosystem":"maven","package_name":"com.fasterxml.jackson.core:jackson-databind","versions":[{"first_patched_version":"2.9.4","vulnerable_version_range":"\u003e= 2.9.0, \u003c 2.9.4"}],"purl":null}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXJmeDYtdnA5Zy1yaDd2/related_packages","related_advisories":[]},{"uuid":"MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWg1OTItMzhjbS00Z2dw","url":"https://github.com/advisories/GHSA-h592-38cm-4ggp","title":"jackson-databind vulnerable to deserialization flaw leading to unauthenticated remote code execution","description":"jackson-databind in versions prior to 2.8.11 and 2.9.4 contain a deserialization flaw which allows an unauthenticated user to perform code execution by sending maliciously crafted input to the readValue method of the ObjectMapper. This issue extends the previous flaw CVE-2017-7525, blacklisting additonal vulnerable classes.","origin":"UNSPECIFIED","severity":"CRITICAL","published_at":"2018-10-18T17:42:34.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":9.8,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","references":["https://nvd.nist.gov/vuln/detail/CVE-2017-15095","https://github.com/FasterXML/jackson-databind/issues/1680","https://github.com/FasterXML/jackson-databind/issues/1737","https://access.redhat.com/errata/RHSA-2017:3189","https://access.redhat.com/errata/RHSA-2017:3190","https://access.redhat.com/errata/RHSA-2018:0342","https://access.redhat.com/errata/RHSA-2018:0478","https://access.redhat.com/errata/RHSA-2018:0479","https://access.redhat.com/errata/RHSA-2018:0480","https://access.redhat.com/errata/RHSA-2018:0481","https://access.redhat.com/errata/RHSA-2018:0576","https://access.redhat.com/errata/RHSA-2018:0577","https://access.redhat.com/errata/RHSA-2018:1447","https://access.redhat.com/errata/RHSA-2018:1448","https://access.redhat.com/errata/RHSA-2018:1449","https://access.redhat.com/errata/RHSA-2018:1450","https://access.redhat.com/errata/RHSA-2018:1451","https://access.redhat.com/errata/RHSA-2018:2927","https://access.redhat.com/errata/RHSA-2019:2858","https://access.redhat.com/errata/RHSA-2019:3149","https://access.redhat.com/errata/RHSA-2019:3892","https://lists.apache.org/thread.html/f095a791bda6c0595f691eddd0febb2d396987eec5cbd29120d8c629@%3Csolr-user.lucene.apache.org%3E","https://lists.debian.org/debian-lts-announce/2020/01/msg00037.html","https://www.debian.org/security/2017/dsa-4037","https://www.oracle.com/security-alerts/cpuoct2020.html","https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html","https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html","http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html","http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html","http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html","https://github.com/FasterXML/jackson-databind/commit/a3939d36edcc755c8af55bdc1969e0fa8438f9db","https://github.com/FasterXML/jackson-databind/commit/ddfddfba6414adbecaff99684ef66eebd3a92e92","https://github.com/FasterXML/jackson-databind/commit/e865a7a4464da63ded9f4b1a2328ad85c9ded78b","https://github.com/FasterXML/jackson-databind/commit/e8f043d1aac9b82eee907e0f0c3abbdea723a935","https://web.archive.org/web/20200401000000*/http://www.securityfocus.com/bid/103880","https://web.archive.org/web/20201221192044/http://www.securitytracker.com/id/1039769","https://github.com/FasterXML/jackson-databind/commit/a054585e2175ad0882f07bcafedecfac86230f1b","https://github.com/tolbertam/jackson-databind/commit/80566a0f96b2003863f9d8f9ccc3b562001e147b","https://security.netapp.com/advisory/ntap-20171214-0003","https://github.com/advisories/GHSA-h592-38cm-4ggp"],"source_kind":"github","identifiers":["GHSA-h592-38cm-4ggp","CVE-2017-15095"],"repository_url":"https://github.com/FasterXML/jackson-databind","blast_radius":0.0,"created_at":"2022-12-21T16:13:34.344Z","updated_at":"2026-06-20T05:08:02.501Z","epss_percentage":0.08411,"epss_percentile":0.9428,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWg1OTItMzhjbS00Z2dw","html_url":"https://advisories.ecosyste.ms/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWg1OTItMzhjbS00Z2dw","packages":[{"ecosystem":"maven","package_name":"com.fasterxml.jackson.core:jackson-databind","versions":[{"first_patched_version":"2.8.11","vulnerable_version_range":"\u003e= 2.8.0, \u003c 2.8.11"},{"first_patched_version":"2.9.4","vulnerable_version_range":"\u003e= 2.9.0, \u003c 2.9.4"}],"purl":null}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWg1OTItMzhjbS00Z2dw/related_packages","related_advisories":[]},{"uuid":"MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWNnZ2otZnZ2My1jcXd2","url":"https://github.com/advisories/GHSA-cggj-fvv3-cqwv","title":"FasterXML jackson-databind allows unauthenticated remote code execution ","description":"FasterXML jackson-databind before before 2.6.7.5, 2.7.x before 2.7.9.3, 2.8.x before 2.8.11.1, and 2.9.x before 2.9.5 allows unauthenticated remote code execution because of an incomplete fix for the CVE-2017-7525 deserialization flaw. This is exploitable by sending maliciously crafted JSON input to the readValue method of the ObjectMapper, bypassing a blacklist that is ineffective if the c3p0 libraries are available in the classpath.","origin":"UNSPECIFIED","severity":"CRITICAL","published_at":"2018-10-16T17:45:18.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":9.8,"cvss_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","references":["https://nvd.nist.gov/vuln/detail/CVE-2018-7489","https://github.com/FasterXML/jackson-databind/issues/1931","https://access.redhat.com/errata/RHSA-2018:1447","https://access.redhat.com/errata/RHSA-2018:1448","https://access.redhat.com/errata/RHSA-2018:1449","https://access.redhat.com/errata/RHSA-2018:1450","https://access.redhat.com/errata/RHSA-2018:1451","https://access.redhat.com/errata/RHSA-2018:1786","https://access.redhat.com/errata/RHSA-2018:2088","https://access.redhat.com/errata/RHSA-2018:2089","https://access.redhat.com/errata/RHSA-2018:2090","https://access.redhat.com/errata/RHSA-2018:2938","https://access.redhat.com/errata/RHSA-2018:2939","https://access.redhat.com/errata/RHSA-2019:2858","https://access.redhat.com/errata/RHSA-2019:3149","https://github.com/advisories/GHSA-cggj-fvv3-cqwv","https://lists.apache.org/thread.html/r1d4a247329a8478073163567bbc8c8cb6b49c6bfc2bf58153a857af1@%3Ccommits.druid.apache.org%3E","https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbhf03902en_us","https://www.debian.org/security/2018/dsa-4190","https://www.oracle.com/security-alerts/cpuoct2020.html","https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html","https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html","https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html","http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html","http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html","http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html","https://github.com/FasterXML/jackson-databind/commit/6799f8f10cc78e9af6d443ed6982d00a13f2e7d2","https://github.com/FasterXML/jackson-databind/commit/c921f0935d5e41bf206e702d8077a275ba1a6efc","https://github.com/FasterXML/jackson-databind/commit/ca2bfc86af82a1479112004b663ba74c760752e6","https://github.com/FasterXML/jackson-databind/commit/e66c0a9d3c926ff1b63bf586c824ead1d02f2a3d","https://security.netapp.com/advisory/ntap-20180328-0001","https://github.com/FasterXML/jackson-databind/commit/bc22f90eb7f896ace9567598a99cb1ff6e0f9d9d"],"source_kind":"github","identifiers":["GHSA-cggj-fvv3-cqwv","CVE-2018-7489"],"repository_url":"https://github.com/FasterXML/jackson-databind","blast_radius":0.0,"created_at":"2022-12-21T16:12:59.280Z","updated_at":"2026-06-20T04:06:20.022Z","epss_percentage":0.20521,"epss_percentile":0.97188,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWNnZ2otZnZ2My1jcXd2","html_url":"https://advisories.ecosyste.ms/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWNnZ2otZnZ2My1jcXd2","packages":[{"ecosystem":"maven","package_name":"com.fasterxml.jackson.core:jackson-databind","versions":[{"first_patched_version":"2.6.7.5","vulnerable_version_range":"\u003c 2.6.7.5"},{"first_patched_version":"2.7.9.3","vulnerable_version_range":"\u003e= 2.7.0, \u003c 2.7.9.3"},{"first_patched_version":"2.8.11.1","vulnerable_version_range":"\u003e= 2.8.0, \u003c= 2.8.11.0"},{"first_patched_version":"2.9.5","vulnerable_version_range":"\u003e= 2.9.0, \u003c 2.9.5"}],"purl":null}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWNnZ2otZnZ2My1jcXd2/related_packages","related_advisories":[]},{"uuid":"MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXF4eHgtMnBwNy01aG14","url":"https://github.com/advisories/GHSA-qxxx-2pp7-5hmx","title":"jackson-databind is vulnerable to a deserialization flaw","description":"A deserialization flaw was discovered in the jackson-databind, versions before 2.6.7.1, 2.7.9.1 and 2.8.9, which could allow an unauthenticated user to perform code execution by sending the maliciously crafted input to the readValue method of the ObjectMapper.","origin":"UNSPECIFIED","severity":"CRITICAL","published_at":"2018-10-16T17:21:35.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":9.8,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","references":["https://nvd.nist.gov/vuln/detail/CVE-2017-7525","https://github.com/FasterXML/jackson-databind/issues/1599","https://github.com/FasterXML/jackson-databind/issues/1723","https://access.redhat.com/errata/RHSA-2017:1834","https://access.redhat.com/errata/RHSA-2017:1835","https://access.redhat.com/errata/RHSA-2017:1836","https://access.redhat.com/errata/RHSA-2017:1837","https://access.redhat.com/errata/RHSA-2017:1839","https://access.redhat.com/errata/RHSA-2017:1840","https://access.redhat.com/errata/RHSA-2017:2477","https://access.redhat.com/errata/RHSA-2017:2546","https://access.redhat.com/errata/RHSA-2017:2547","https://access.redhat.com/errata/RHSA-2017:2633","https://access.redhat.com/errata/RHSA-2017:2635","https://access.redhat.com/errata/RHSA-2017:2636","https://access.redhat.com/errata/RHSA-2017:2637","https://access.redhat.com/errata/RHSA-2017:2638","https://access.redhat.com/errata/RHSA-2017:3141","https://access.redhat.com/errata/RHSA-2017:3454","https://access.redhat.com/errata/RHSA-2017:3455","https://access.redhat.com/errata/RHSA-2017:3456","https://access.redhat.com/errata/RHSA-2017:3458","https://access.redhat.com/errata/RHSA-2018:0294","https://access.redhat.com/errata/RHSA-2018:0342","https://access.redhat.com/errata/RHSA-2018:1449","https://access.redhat.com/errata/RHSA-2018:1450","https://access.redhat.com/errata/RHSA-2019:0910","https://access.redhat.com/errata/RHSA-2019:2858","https://access.redhat.com/errata/RHSA-2019:3149","https://bugzilla.redhat.com/show_bug.cgi?id=1462702","https://cwiki.apache.org/confluence/display/WW/S2-055","https://github.com/advisories/GHSA-qxxx-2pp7-5hmx","https://lists.apache.org/thread.html/3c87dc8bca99a2b3b4743713b33d1de05b1d6b761fdf316224e9c81f@%3Cdev.lucene.apache.org%3E","https://lists.apache.org/thread.html/4641ed8616ccc2c1fbddac2c3dc9900c96387bc226eaf0232d61909b@%3Ccommits.cassandra.apache.org%3E","https://lists.apache.org/thread.html/5008bcbd45ee65ce39e4220b6ac53d28a24d6bc67d5804e9773a7399@%3Csolr-user.lucene.apache.org%3E","https://lists.apache.org/thread.html/708d94141126eac03011144a971a6411fcac16d9c248d1d535a39451@%3Csolr-user.lucene.apache.org%3E","https://lists.apache.org/thread.html/9317fd092b257a0815434b116a8af8daea6e920b6673f4fd5583d5fe@%3Ccommits.druid.apache.org%3E","https://lists.apache.org/thread.html/b1f33fe5ade396bb903fdcabe9f243f7692c7dfce5418d3743c2d346@%3Cdev.lucene.apache.org%3E","https://lists.apache.org/thread.html/c10a2bf0fdc3d25faf17bd191d6ec46b29a353fa9c97bebd7c4e5913@%3Cdev.lucene.apache.org%3E","https://lists.apache.org/thread.html/c2ed4c0126b43e324cf740012a0edd371fd36096fd777be7bfe7a2a6@%3Cdev.lucene.apache.org%3E","https://lists.apache.org/thread.html/c9d5ff20929e8a3c8794facf4c4b326a9c10618812eec356caa20b87@%3Csolr-user.lucene.apache.org%3E","https://lists.apache.org/thread.html/f095a791bda6c0595f691eddd0febb2d396987eec5cbd29120d8c629@%3Csolr-user.lucene.apache.org%3E","https://lists.apache.org/thread.html/f60afd3c7e9ebaaf70fad4a4beb75cf8740ac959017a31e7006c7486@%3Cdev.lucene.apache.org%3E","https://lists.apache.org/thread.html/r68acf97f4526ba59a33cc6e592261ea4f85d890f99e79c82d57dd589@%3Cissues.spark.apache.org%3E","https://lists.debian.org/debian-lts-announce/2020/01/msg00037.html","https://lists.debian.org/debian-lts-announce/2020/08/msg00039.html","https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbhf03902en_us","https://www.debian.org/security/2017/dsa-4004","https://www.oracle.com/security-alerts/cpuoct2020.html","https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html","https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html","https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html","http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html","http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html","http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html","https://lists.apache.org/thread.html/r42ac3e39e6265db12d9fc6ae1cd4b5fea7aed9830dc6f6d58228fed7@%3Ccommits.cassandra.apache.org%3E","https://lists.apache.org/thread.html/rf7f87810c38dc9abf9f93989f76008f504cbf7c1a355214640b2d04c@%3Ccommits.cassandra.apache.org%3E","https://github.com/FasterXML/jackson-databind/commit/3bfbb835e530055c1941ddf87fde0b08d08dcd38","https://github.com/FasterXML/jackson-databind/commit/60d459cedcf079c6106ae7da2ac562bc32dcabe1","https://github.com/FasterXML/jackson-databind/commit/680d75b011edd67a2d2a2e9980998a968194c2ef","https://github.com/FasterXML/jackson-databind/commit/6ce32ffd18facac6abdbbf559c817b47fcb622c1","https://github.com/FasterXML/jackson-databind/commit/90042692085deeb05ae75c569c9909f7dba24415","https://github.com/FasterXML/jackson-databind/commit/fa87c1ddbe803ebb7295f5c2ebfe38e12f6e6162","https://github.com/FasterXML/jackson-databind/commit/fd8dec2c7fab8b4b4bd60502a0f1d63ec23c24da","https://security.netapp.com/advisory/ntap-20171214-0002"],"source_kind":"github","identifiers":["GHSA-qxxx-2pp7-5hmx","CVE-2017-7525"],"repository_url":"https://github.com/FasterXML/jackson-databind","blast_radius":0.0,"created_at":"2022-12-21T16:12:59.529Z","updated_at":"2026-06-20T04:08:16.969Z","epss_percentage":0.37925,"epss_percentile":0.98361,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXF4eHgtMnBwNy01aG14","html_url":"https://advisories.ecosyste.ms/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXF4eHgtMnBwNy01aG14","packages":[{"ecosystem":"maven","package_name":"com.fasterxml.jackson.core:jackson-databind","versions":[{"first_patched_version":"2.7.9.1","vulnerable_version_range":"\u003e= 2.7.0, \u003c= 2.7.9.0"},{"first_patched_version":"2.6.7.1","vulnerable_version_range":"\u003c= 2.6.7.0"},{"first_patched_version":"2.8.9","vulnerable_version_range":"\u003e= 2.8.0, \u003c 2.8.9"}],"purl":null}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXF4eHgtMnBwNy01aG14/related_packages","related_advisories":[]}],"docker_usage_url":"https://docker.ecosyste.ms/usage/maven/com.fasterxml.jackson.core:jackson-databind","docker_dependents_count":44228,"docker_downloads_count":16203456674,"usage_url":"https://repos.ecosyste.ms/usage/maven/com.fasterxml.jackson.core:jackson-databind","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/maven/com.fasterxml.jackson.core:jackson-databind/dependencies","status":null,"funding_links":["https://tidelift.com/funding/github/maven/com.fasterxml.jackson.core:jackson-databind","https://github.com/sponsors/cowtowncoder"],"critical":true,"issue_metadata":{"last_synced_at":"2025-10-08T15:05:49.437Z","issues_count":723,"pull_requests_count":1001,"avg_time_to_close_issue":50566455.05697446,"avg_time_to_close_pull_request":2639838.827092511,"issues_closed_count":509,"pull_requests_closed_count":908,"pull_request_authors_count":76,"issue_authors_count":477,"avg_comments_per_issue":4.853388658367911,"avg_comments_per_pull_request":1.7032967032967032,"merged_pull_requests_count":786,"bot_issues_count":1,"bot_pull_requests_count":50,"past_year_issues_count":235,"past_year_pull_requests_count":565,"past_year_avg_time_to_close_issue":852380.1096774193,"past_year_avg_time_to_close_pull_request":284969.17588932806,"past_year_issues_closed_count":155,"past_year_pull_requests_closed_count":506,"past_year_pull_request_authors_count":36,"past_year_issue_authors_count":130,"past_year_avg_comments_per_issue":3.136170212765957,"past_year_avg_comments_per_pull_request":1.2849557522123893,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":19,"past_year_merged_pull_requests_count":455,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/issues","maintainers":[{"login":"cowtowncoder","count":498,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/cowtowncoder"},{"login":"JooHyukKim","count":234,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/JooHyukKim"},{"login":"pjfanning","count":128,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/pjfanning"},{"login":"yawkat","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/yawkat"},{"login":"divan-9","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/divan-9"},{"login":"christophercurrie","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/christophercurrie"},{"login":"khogeland","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/khogeland"}],"active_maintainers":[{"login":"cowtowncoder","count":320,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/cowtowncoder"},{"login":"JooHyukKim","count":132,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/JooHyukKim"},{"login":"pjfanning","count":62,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/pjfanning"},{"login":"yawkat","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/yawkat"},{"login":"divan-9","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/divan-9"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.fasterxml.jackson.core:jackson-databind/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.fasterxml.jackson.core:jackson-databind/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.fasterxml.jackson.core:jackson-databind/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.fasterxml.jackson.core:jackson-databind/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.fasterxml.jackson.core:jackson-databind/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.fasterxml.jackson.core:jackson-databind/codemeta","maintainers":[],"registry":{"name":"repo1.maven.org","url":"https://repo.maven.apache.org/maven2","ecosystem":"maven","default":true,"packages_count":608482,"maintainers_count":0,"namespaces_count":80807,"keywords_count":34879,"github":"maven-central","metadata":{"funded_packages_count":37828},"icon_url":"https://github.com/maven-central.png","created_at":"2022-07-21T16:40:13.074Z","updated_at":"2026-06-10T05:05:55.821Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/namespaces"}}],"commits":{"id":18273,"full_name":"FasterXML/jackson-databind","default_branch":"2.x","total_commits":8842,"total_committers":372,"total_bot_commits":58,"total_bot_committers":1,"mean_commits":23.768817204301076,"dds":0.1481565256729247,"past_year_total_commits":949,"past_year_total_committers":41,"past_year_total_bot_commits":12,"past_year_total_bot_committers":1,"past_year_mean_commits":23.146341463414632,"past_year_dds":0.17597471022128552,"last_synced_at":"2026-05-16T10:29:25.017Z","last_synced_commit":"ab8cb422ddc58531fbf2448078f7e4056830ee88","created_at":"2023-03-07T11:37:39.322Z","updated_at":"2026-05-16T10:27:46.936Z","committers":[{"name":"Tatu Saloranta","email":"tatu.saloranta@iki.fi","login":"cowtowncoder","count":7532},{"name":"Kim, Joo Hyuk","email":"beanskobe@gmail.com","login":"JooHyukKim","count":238},{"name":"PJ Fanning","email":"pjfanning","login":"pjfanning","count":116},{"name":"Tatu","email":"tatu@ning.com","login":null,"count":78},{"name":"dependabot[bot]","email":"49699333+dependabot[bot]","login":"dependabot[bot]","count":58},{"name":"Tatu Saloranta","email":"tsaloranta@salesforce.com","login":"tatu-at-salesforce","count":43},{"name":"jackphel","email":"jackphel@gmail.com","login":null,"count":27},{"name":"Pascal Gélinas","email":"pascal.gelinas@nuecho.com","login":null,"count":26},{"name":"Jackson","email":"hyo961015@naver.com","login":"JacksonJang","count":22},{"name":"Christopher Currie","email":"christopher@currie.com","login":"christophercurrie","count":20},{"name":"Carter Kozak","email":"ckozak@ckozak.net","login":"carterkozak","count":19},{"name":"Lee Jiwon","email":"107186291+dlwldnjs1009","login":"dlwldnjs1009","count":17},{"name":"wrongwrong","email":"k163377","login":"k163377","count":14},{"name":"Francis Galiegue","email":"fgaliegue@gmail.com","login":"fge","count":12},{"name":"Jonas Konrad","email":"jonas.konrad@oracle.com","login":"yawkat","count":11},{"name":"Francis Galiegue","email":"francis.galiegue@commerceguys.com","login":null,"count":11},{"name":"Bertrand Renuart","email":"bertrand.renuart@itma.lu","login":"brenuart","count":10},{"name":"Andy Boothe","email":"andy.boothe@gmail.com","login":"sigpwned","count":9},{"name":"Copilot","email":"198982749+Copilot","login":"Copilot","count":9},{"name":"Carsten Wickner","email":"Carsten.Wickner@gmx.de","login":"CarstenWickner","count":9},{"name":"Benson Margulies","email":"benson@basistech.com","login":"benson-basis","count":8},{"name":"Hugo Wood","email":"hx4.5@free.fr","login":"hgwood","count":8},{"name":"Sim Yih Tsern","email":"sim_yihtsern@yahoo.com","login":"yihtserns","count":8},{"name":"Davyd Fridman","email":"davyd2000mail@gmail.com","login":"tiger9800","count":8},{"name":"Ville Koskela","email":"ville@koskelafamily.com","login":"vjkoskela","count":8},{"name":"Martin Steiger","email":"git@martin-steiger.de","login":"msteiger","count":7},{"name":"Matthew Morrissette","email":"yinzara@gmail.com","login":"yinzara","count":6},{"name":"iProdigy","email":"8106344+iProdigy","login":"iProdigy","count":6},{"name":"Muhammad Khalikov","email":"55890311+mukham12","login":"mukham12","count":6},{"name":"Michael Spiegel","email":"spiegel@addthis.com","login":null,"count":5},{"name":"Marco Catania","email":"mcatania@hubspot.com","login":"catanm","count":5},{"name":"Ben Gertzfield","email":"beng@fb.com","login":"bhamiltoncx","count":4},{"name":"FelixVaughan01","email":"104791446+FelixVaughan01","login":"FelixVaughan01","count":4},{"name":"Jacek Jackowiak","email":"jacek1986@gmail.com","login":"airborn","count":4},{"name":"Kamil Benedykcinski","email":"kamil.benedykcinski@allegro.pl","login":"Kamil-Benedykcinski","count":4},{"name":"Michael Hixson","email":"mhixson@techempower.com","login":"michaelhixson","count":4},{"name":"Robin Roos","email":"robin@roos.uk.net","login":"robinroos","count":4},{"name":"Alejandro Rivera","email":"alejandro@redmart.com","login":null,"count":4},{"name":"Stephan Schroevers","email":"stephan.schroevers@teampicnic.com","login":"Stephan202","count":4},{"name":"Ivo Studensky","email":"istudens@redhat.com","login":"istudens","count":3},{"name":"Steven Schlansker","email":"sschlansker@opentable.com","login":null,"count":3},{"name":"Joe Barnett","email":"jbarnett@tribedynamics.com","login":"josephlbarnett","count":3},{"name":"Jordi Ortolá Ankum","email":"Tomasito665","login":"Tomasito665","count":3},{"name":"Oddbjørn Kvalsund","email":"oddbjorn.kvalsund@gmail.com","login":"oddbjornkvalsund","count":3},{"name":"David Fleeman","email":"david.fleeman@teradata.com","login":null,"count":3},{"name":"Adam Stroud","email":"adam.stroud@gmail.com","login":"adstro","count":3},{"name":"Ben Fagin","email":"blouis@unquietcode.com","login":"UnquietCode","count":3},{"name":"David Haraburda","email":"david@haraburda.com","login":"dharaburda","count":3},{"name":"Giulio Longfils","email":"giuliolongfils@gmail.com","login":"giulong","count":3},{"name":"LokeshN","email":"nlokesh.17@gmail.com","login":"LokeshN","count":3},{"name":"Steven Schlansker","email":"stevenschlansker@gmail.com","login":"stevenschlansker","count":3},{"name":"Yu Han","email":"hannyu@gmail.com","login":"hannyu","count":3},{"name":"drekbour","email":"drekbour@gmail.com","login":"drekbour","count":3},{"name":"jdmichal","email":"jdmichal@gmail.com","login":"jdmichal","count":3},{"name":"jinwook han","email":"jin942002@naver.com","login":"jinwookh","count":3},{"name":"jwilson","email":"jwilson@squareup.com","login":"squarejesse","count":3},{"name":"saurabh-shetty","email":"50320759+saurabh-shetty","login":"saurabh-shetty","count":3},{"name":"timo-a","email":"1398557+timo-a","login":"timo-a","count":3},{"name":"김재헌","email":"127422627+jher235","login":"jher235","count":3},{"name":"valery1707","email":"valery1707@gmail.com","login":"valery1707","count":3},{"name":"Slobodan Pejic","email":"slobo@showbie.com","login":"slobo-showbie","count":3},{"name":"Hélios GILLES","email":"helios.gilles@gmail.com","login":"RoiSoleil","count":2},{"name":"Joshua Arnold","email":"josharnold52@gmail.com","login":"josharnold52","count":2},{"name":"Joshua Jones","email":"jjones@criticalmix.com","login":"senojj","count":2},{"name":"Kai Wang","email":"8738115@qq.com","login":"wangkaish","count":2},{"name":"Lars Benedetto","email":"4466272+lbenedetto","login":"lbenedetto","count":2},{"name":"Lars Pfannenschmidt","email":"lars@mobilecologne.de","login":"larsp","count":2},{"name":"Joost Koehoorn","email":"JoostK","login":"JoostK","count":2},{"name":"Johnny Lim","email":"izeye@naver.com","login":"izeye","count":2},{"name":"Luke Nadur","email":"19835357+intricate","login":"intricate","count":2},{"name":"Marcos Passos","email":"marcospassos","login":"marcospassos","count":2},{"name":"MaximilianTews","email":"38205471+MaximilianTews","login":"MaximilianTews","count":2},{"name":"Michael Ressler","email":"mressler@diamondkinetics.com","login":"mressler","count":2},{"name":"Michal Foksa","email":"github@michalfoksa.net","login":"MichalFoksa","count":2},{"name":"Michał Sobkiewicz","email":"perceptron8","login":"perceptron8","count":2},{"name":"Nathaniel Bauernfeind","email":"nate.bauernfeind@gmail.com","login":"nbauernfeind","count":2},{"name":"Oliver Kopp","email":"kopp.dev@gmail.com","login":"koppor","count":2},{"name":"Pier Fumagalli","email":"pier@fumagalli.org","login":"pfumagalli","count":2},{"name":"Rob Winch","email":"362503+rwinch","login":"rwinch","count":2},{"name":"Sean J. Barbeau","email":"barbeau@cutr.usf.edu","login":"barbeau","count":2},{"name":"Semyon Levin","email":"levin.semen@gmail.com","login":"remal","count":2},{"name":"Stanislav Shcherbakov","email":"GloRRian55@yandex.ru","login":"glorrian","count":2},{"name":"Youri Bonnaffé","email":"youribm@gmail.com","login":"youribonnaffe","count":2},{"name":"Your Name","email":"fotero@gmail.com","login":"zeitos","count":2},{"name":"Yoann Rodière","email":"yoann.rodiere@openwide.fr","login":"yrodiere","count":2},{"name":"Tillerino","email":"tillmann.gaida@gmail.com","login":"Tillerino","count":2},{"name":"Swayam Raina","email":"swayamraina@gmail.com","login":"swayamraina","count":2},{"name":"Steven Kusuman","email":"52606428+cperkkk","login":"cperkkk","count":2},{"name":"Jeff Evans","email":"jeff303","login":"jeff303","count":2},{"name":"Zeyu Cai","email":"zychoi0318@gmail.com","login":"ZeyuCai","count":2},{"name":"Zhen Lin Low","email":"319397+zhenlin","login":"zhenlin","count":2},{"name":"alevskyi","email":"alexposl89@gmail.com","login":"alevskyi","count":2},{"name":"based2","email":"based2","login":"based2","count":2},{"name":"Eric Tschetter","email":"cheddar@metamarketsgroup.com","login":"cheddar","count":2},{"name":"joongsoo","email":"wndtn853@gmail.com","login":"joongsoo","count":2},{"name":"lpandzic","email":"lovro.pandzic@infobip.com","login":"lpandzic","count":2},{"name":"lufe66","email":"lufe66@gmail.com","login":"lufegit","count":2},{"name":"mluckam","email":"mcl209@vt.edu","login":"mluckam","count":2},{"name":"qxo","email":"49526356@qq.com","login":"qxo","count":2},{"name":"siavash","email":"siavash.solimanii@yahoo.com","login":"siavashsoleymani","count":2},{"name":"Пендальф Синий","email":"softoad2@gmail.com","login":"yamert89","count":2},{"name":"ian","email":"ian@addthis.com","login":"tea-dragon","count":2},{"name":"ILGO0413","email":"iliagolovin@gmail.com","login":"ILGO0413","count":2},{"name":"flinter","email":"56645802+jhan0121","login":"jhan0121","count":2},{"name":"dalbrx-nitrobox","email":"144020665+dalbrx-nitrobox","login":"dalbrx-nitrobox","count":2},{"name":"contextshuffling","email":"contextshuffling@gmail.com","login":"contextshuffling","count":2},{"name":"Klaas Dellschaft","email":"klaas.dellschaft@dbschenker.com","login":"klaasdellschaft","count":2},{"name":"Peter Levart","email":"peter.levart@gmail.com","login":"plevart","count":2},{"name":"Philzen","email":"Philzen","login":"Philzen","count":2},{"name":"shaiyallin","email":"shaiy@wix.com","login":null,"count":2},{"name":"Steve Sanbeg","email":"sanbeg@yahoo-inc.com","login":null,"count":2},{"name":"fxshlein","email":"Neonfxsh@gmail.com","login":"fxshlein","count":2},{"name":"Steven Schlansker","email":"steven@likeness.com","login":null,"count":2},{"name":"Will Palmeri","email":"wpalmeri@paypal.com","login":null,"count":2},{"name":"Stephen A. Goss","email":"stephen.goss@urbanairship.com","login":null,"count":2},{"name":"Sergio-Mira","email":"sergio.mira@swrve.com","login":null,"count":2},{"name":"Jerome Guibert","email":"jerome.guibert@fullsix.com","login":null,"count":2},{"name":"Jerry Yang","email":"jerry.yang@walmartlabs.com","login":null,"count":2},{"name":"liyuj","email":"sahala232@163.com","login":null,"count":2},{"name":"Chris Jester-Young","email":"cky@on-site.com","login":null,"count":2},{"name":"Yeikel","email":"email@yeikel.com","login":"yeikel","count":2},{"name":"Patrick Huber","email":"stackmagic@gmail.com","login":"stackmagic","count":2},{"name":"Aaron Davidson","email":"aaron@databricks.com","login":"aarondav","count":2},{"name":"chrnndz3","email":"chrnndz3@gmail.com","login":"chrnndz3","count":2},{"name":"Fouad Almalki","email":"me@fouad.io","login":"Eng-Fouad","count":2},{"name":"Fawzi Essam","email":"iifawzie@gmail.com","login":"iifawzi","count":2},{"name":"Evgeny Mandrikov","email":"138671+Godin","login":"Godin","count":2},{"name":"Erich Schubert","email":"kno10","login":"kno10","count":2},{"name":"Eduard Gomoliako","email":"eduard.gomolyako@gmail.com","login":"Gems","count":2},{"name":"MoritzR200","email":"66512903+MoritzR200","login":"MoritzR200","count":2},{"name":"Drew Stephens","email":"drew@dinomite.net","login":"dinomite","count":2},{"name":"Dmitry Spikhalskiy","email":"dmitry@spikhalskiy.com","login":"Spikhalskiy","count":2},{"name":"Dmitry Katsubo","email":"dmitry.katsubo@gmail.com","login":"dmak","count":2},{"name":"David Bidorff","email":"david.bidorff@orange.com","login":"bidorffOL","count":2},{"name":"Daniel Norberg","email":"daniel.norberg@gmail.com","login":"danielnorberg","count":2},{"name":"ChangYong","email":"lcy9002@naver.com","login":"LichKing-lee","count":2},{"name":"Blaine Bublitz","email":"blaine@tidelift.com","login":"phated","count":2},{"name":"Artem Smotrakov","email":"artem.smotrakov@gmail.com","login":"artem-smotrakov","count":2},{"name":"Alain Lehmann","email":"alain.lehmann@gmail.com","login":"ciderale","count":1},{"name":"Ajay Siwach","email":"ajaysiwach16@gmail.com","login":"Siwach16","count":1},{"name":"AdamKorcz","email":"44787359+AdamKorcz","login":"AdamKorcz","count":1},{"name":"Alanscut","email":"wp_scut@163.com","login":"Alanscut","count":1},{"name":"Aleksandar Seovic","email":"aleks@seovic.com","login":"aseovic","count":1},{"name":"Alessandro Nistico","email":"alienisty@gmail.com","login":"alienisty","count":1},{"name":"Alexander Wirth","email":"alexander.wirth01@sap.com","login":"AlexanderWirthSAP","count":1},{"name":"Dan Walker","email":"dwalker@palantir.com","login":"dsw2127","count":1},{"name":"Connor Kuhn","email":"connor.kuhn@kuhnclan.com","login":"ckuhn","count":1},{"name":"Christopher Currie","email":"codemonkey@usermind.com","login":"umcodemonkey","count":1},{"name":"Charles Allen","email":"charles@allen-net.com","login":"drcrallen","count":1},{"name":"Chad Selph","email":"chad.selph@gmail.com","login":"chadselph","count":1},{"name":"Cesar Hernandez","email":"cesarhernandezgt","login":"cesarhernandezgt","count":1},{"name":"Benoit Chatain Lacelle","email":"benoit.chatain.lacelle@gmail.com","login":"blacelle","count":1},{"name":"Baptiste Pernet","email":"pernetmu@gmail.com","login":"sp4ce","count":1},{"name":"BELUGABEHR","email":"BELUGABEHR","login":"BELUGABEHR","count":1},{"name":"Artur Dryomov","email":"artur.dryomov@gmail.com","login":"arturdryomov","count":1},{"name":"Artem Prigoda","email":"arteamon@gmail.com","login":"arteam","count":1},{"name":"Arnaud Solé","email":"bluexin.games@gmail.com","login":"Bluexin","count":1},{"name":"Ari Fogel","email":"ari@fogelti.me","login":"arifogel","count":1},{"name":"Anton Panferov","email":"smaant@gmail.com","login":"smaant","count":1},{"name":"Anil Kelwalkar","email":"kelubhai","login":"kelubhai","count":1},{"name":"Andrew Tolbert","email":"andrew.tolbert@datastax.com","login":"tolbertam","count":1},{"name":"Eitan Adler","email":"lists@eitanadler.com","login":"grimreaper","count":1},{"name":"zoliszel","email":"zoltan.szel@mahifx.com","login":null,"count":1},{"name":"jphelan","email":"jphelan@192.168.1.141","login":null,"count":1},{"name":"Tito Cheriachan","email":"mail@titocheriachan.com","login":null,"count":1},{"name":"Tatu Saloranta","email":"tatu@Tatus-Mac-mini.local","login":null,"count":1},{"name":"Steven Parkes","email":"sparkes@twitter.com","login":null,"count":1},{"name":"Petr Kokorev","email":"petr_kokorev@pisem.net","login":null,"count":1},{"name":"Mikhail Kokho","email":"mikhail@movio.co","login":null,"count":1},{"name":"Michael Sims","email":"msims@mercuryintermedia.com","login":null,"count":1},{"name":"Max Drobotov","email":"mdrobotov@cogniance.com","login":null,"count":1},{"name":"Matt Veitas","email":"mveitas@hubspot.com","login":null,"count":1},{"name":"Marcel Overdijk","email":"marcel@overdijk.me","login":null,"count":1},{"name":"Marcel Overdijk","email":"marcel.overdijk@qnh.nl","login":null,"count":1},{"name":"Karl Moore","email":"kmoore@barracuda.com","login":null,"count":1},{"name":"John Meyer","email":"john.meyer@govivoom.com","login":null,"count":1},{"name":"James Rawlings","email":"james.rawlings@monitisegroup.com","login":null,"count":1},{"name":"Eduard Tudenhoefner","email":"eduard.tudenhoefner@datastax.com","login":null,"count":1},{"name":"ESolberg","email":"esolberg@homeaway.com","login":null,"count":1},{"name":"Christopher Currie","email":"ccurrie@impresys.com","login":null,"count":1},{"name":"Andy Clayton","email":"ajclayton@spscommerce.com","login":null,"count":1},{"name":"Andrew Goodale","email":"agoodale@wingspan.com","login":null,"count":1},{"name":"Alain Gilbert","email":"alain.gilbert@ticketmaster.com","login":null,"count":1},{"name":"Andrew Brampton","email":"brampton@gmail.com","login":"bramp","count":1},{"name":"AnaEliza","email":"eng.ana.eliza@gmail.com","login":"AnaEliza","count":1},{"name":"AmiDavidW","email":"47610659+AmiDavidW","login":"AmiDavidW","count":1},{"name":"Alexey Gavrilov","email":"agavrilov@telenordigital.com","login":"agavrilov76","count":1},{"name":"Alexandre Campelo","email":"aleqi200@gmail.com","login":"aleqi200","count":1},{"name":"Sergey Nuyanzin","email":"sergey.nuyanzin@aiven.io","login":"snuyanzin","count":1},{"name":"Sergii Prodan","email":"serpro@disroot.org","login":"serpro69","count":1},{"name":"Sergiy Yevtushenko","email":"Sergiy.Yevtushenko@gmail.com","login":"siy","count":1},{"name":"Seth Pellegrino","email":"seth.pellegrino@jivesoftware.com","login":"sethp-jive","count":1},{"name":"Sola","email":"dev@sola.love","login":"unlimitedsola","count":1},{"name":"StefanSchmidtOracle","email":"67461388+StefanSchmidtOracle","login":"StefanSchmidtOracle","count":1},{"name":"Stephan L","email":"stefanl2@yahoo.fr","login":"stephlag","count":1},{"name":"Stephen","email":"stephen.curran@est.tech","login":"stecurran-est-tech","count":1},{"name":"Steve Storey","email":"sstorey@gmail.com","login":"stevestorey","count":1},{"name":"Steven Benitez","email":"steven.benitez@gmail.com","login":"stevenbenitez","count":1},{"name":"Stuart Douglas","email":"stuart.w.douglas@gmail.com","login":"stuartwdouglas","count":1},{"name":"Takanori Hayashi","email":"flowlight0@gmail.com","login":"flowlight0","count":1},{"name":"Tanvesh Takawale","email":"36622194+TanveshT","login":"TanveshT","count":1},{"name":"Tarekk Mohamed Abdalla","email":"tarekkma@gmail.com","login":"TarekkMA","count":1},{"name":"Tatu Saloranta","email":"tatu.saloranta@datastax.com","login":"tatu-at-datastax","count":1},{"name":"Taylor S. Marks","email":"taylor@marksfam.com","login":"TaylorSMarks","count":1},{"name":"Tejas Attarde","email":"201814263+tejasae-afk","login":"tejasae-afk","count":1},{"name":"Tiago Martins","email":"tiagomartins282@gmail.com","login":"upsidedownsmile","count":1},{"name":"Tim Bartley","email":"tbartley@anonyome.com","login":"tbartley","count":1},{"name":"Tobias Preuss","email":"tobias.preuss@googlemail.com","login":"johnjohndoe","count":1},{"name":"V H V Sekhar Durga","email":"dvhv_sekhar@yahoo.com","login":"dvhvsekhar","count":1},{"name":"Victor Noël","email":"victornoel","login":"victornoel","count":1},{"name":"Vikash Tiwari","email":"tiwari.vikash@gmail.com","login":"tiwarivikash","count":1},{"name":"Paul Brown","email":"prb@mult.ifario.us","login":"prb","count":1},{"name":"Pedro Kaj Kjellerup Nacht","email":"pedro.k.night@gmail.com","login":"pnacht","count":1},{"name":"Peter Jurkovic","email":"petojurkovic@gmail.com","login":"peterjurkovic","count":1},{"name":"Phil Leonard","email":"phillyleonard@gmail.com","login":"philleonard","count":1},{"name":"Philip Aston","email":"philipa@mail.com","login":"philipa","count":1},{"name":"Philipp Scheit","email":"p.scheit@ps-webforge.com","login":"pscheit","count":1},{"name":"Philippe Marschall","email":"philippe.marschall@gmail.com","login":"marschall","count":1},{"name":"Piotr Findeisen","email":"piotr.findeisen@gmail.com","login":"findepi","count":1},{"name":"Polina","email":"polinarodimova@gmail.com","login":"PolinaRodimova","count":1},{"name":"Praneeth Reddy Junnuthula","email":"34249127+praneethjreddy","login":"praneethjreddy","count":1},{"name":"Richard Kwasnicki","email":"richard.kwasnicki@gmx.de","login":"Richie94","count":1},{"name":"Richard Zowalla","email":"13417392+rzo1","login":"rzo1","count":1},{"name":"Rikkarth","email":"76500344+rikkarth","login":"rikkarth","count":1},{"name":"Robin Kanters","email":"robinkanters","login":"robinkanters","count":1},{"name":"Roman Leventov","email":"leventov.ru@gmail.com","login":"leventov","count":1},{"name":"Rune Flobakk","email":"flobakk@gmail.com","login":"runeflobakk","count":1},{"name":"Ruud Welling","email":"wellingr","login":"wellingr","count":1},{"name":"Ryan Gardner","email":"ryan.gardner@dealer.com","login":"ryangardner","count":1},{"name":"Ryan Schmitt","email":"rschmitt@pobox.com","login":"rschmitt","count":1},{"name":"Réda Housni Alaoui","email":"reda-alaoui","login":"reda-alaoui","count":1},{"name":"Samuel Wallan","email":"44255917+swallan","login":"swallan","count":1},{"name":"SandeepGaur2016","email":"76279436+SandeepGaur2016","login":"SandeepGaur2016","count":1},{"name":"Sebastian Schuberth","email":"sschuberth@gmail.com","login":"sschuberth","count":1},{"name":"jonathan.whitall","email":"fiddlerpianist@gmail.com","login":"fiddlerpianist","count":1},{"name":"kishor kunal raj","email":"68464660+kishorkunal-raj","login":"kishorkunal-raj","count":1},{"name":"libetl","email":"libe4@free.fr","login":"libetl","count":1},{"name":"lunaticare","email":"lunaticare","login":"lunaticare","count":1},{"name":"marc-christian-schulze","email":"marc.christian.schulze@gmail.com","login":"marc-christian-schulze","count":1},{"name":"mcvayc","email":"138217485+mcvayc","login":"mcvayc","count":1},{"name":"mgolovatiy-atconsulting-ru","email":"45001746+mgolovatiy-atconsulting-ru","login":"mgolovatiy-atconsulting-ru","count":1},{"name":"nathannaveen","email":"42319948+nathannaveen","login":"nathannaveen","count":1},{"name":"pigelvy","email":"pigelvy","login":"pigelvy","count":1},{"name":"priyanka-28","email":"52324780+priyanka-28","login":"priyanka-28","count":1},{"name":"proost","email":"jwalag87@gmail.com","login":"proost","count":1},{"name":"raphaelNguyen","email":"42530075+raphaelNguyen","login":"raphaelNguyen","count":1},{"name":"rgoldberg","email":"ross.goldberg@gmail.com","login":"rgoldberg","count":1},{"name":"sdoeringNew","email":"sven.doering.new@gmail.com","login":"sdoeringNew","count":1},{"name":"sergeymetallic","email":"sergeymetallic@gmail.com","login":"sergeymetallic","count":1},{"name":"simonetripodi","email":"simone.tripodi@gmail.com","login":"simonetripodi","count":1},{"name":"sri-adarsh-kumar","email":"33520984+sri-adarsh-kumar","login":"sri-adarsh-kumar","count":1},{"name":"twoi","email":"eugen@tworks.co.jp","login":"twoi","count":1},{"name":"vdaniloff","email":"vladimir.daniloff@gmail.com","login":"vdaniloff","count":1},{"name":"zenglian","email":"leon.zeng@qq.com","login":"zenglian","count":1},{"name":"zpGao","email":"beyond_Acm@163.com","login":"beyondacm","count":1},{"name":"罗震宇","email":"lzy@luozy.cn","login":"luozhenyu","count":1},{"name":"송선권","email":"songsunkook@gmail.com","login":"songsunkook","count":1},{"name":"Viktor Szathmáry","email":"phraktle@gmail.com","login":"phraktle","count":1},{"name":"Will Paul","email":"whp3652@rit.edu","login":"dropofwill","count":1},{"name":"Wouter Gerarts","email":"WouterG","login":"WouterG","count":1},{"name":"XakepSDK","email":"XakepSDK","login":"XakepSDK","count":1},{"name":"Yury Molchan","email":"yury.molchan@gmail.com","login":"yurkom","count":1},{"name":"Zwilla","email":"info@zwilla.de","login":"Zwilla","count":1},{"name":"ajostergaard","email":"aj@cubbyhole.net","login":"ajostergaard","count":1},{"name":"andkore","email":"andkore@gmail.com","login":"andkore","count":1},{"name":"arianacai1997","email":"xc984@nyu.edu","login":"arianacai1997","count":1},{"name":"c0nscience","email":"ber.bherzig@gmail.com","login":"c0nscience","count":1},{"name":"chanwonlee","email":"116537544+chanwonlee","login":"chanwonlee","count":1},{"name":"cpilsworth","email":"cpilsworth@gmail.com","login":"cpilsworth","count":1},{"name":"dancer13","email":"alfredotic0809@gmail.com","login":"dancer1325","count":1},{"name":"dominikrebhan","email":"71136398+dominikrebhan","login":"dominikrebhan","count":1},{"name":"dukeyin","email":"dukeyin@outlook.com","login":"dukeyin","count":1},{"name":"eeren-bm","email":"167836818+eeren-bm","login":"eeren-bm","count":1},{"name":"f-aubert","email":"faubert.account@gmail.com","login":"f-aubert","count":1},{"name":"fdutton","email":"fgdutton@gmail.com","login":"fdutton","count":1},{"name":"greeenly","email":"greeenly.dev@gmail.com","login":"greeenly","count":1},{"name":"herau","email":"leboulanger.aurelien@gmail.com","login":"herau","count":1},{"name":"hj987654321","email":"85239815+hj987654321","login":"hj987654321","count":1},{"name":"ifi999","email":"109199387+ifi999","login":"ifi999","count":1},{"name":"jobosk","email":"jobosk","login":"jobosk","count":1},{"name":"Gary","email":"gary.morgan@gmail.com","login":"morganga","count":1},{"name":"Geoffrey GREBERT","email":"geoffrey.grebert@gmail.com","login":"ggrebert","count":1},{"name":"Greg Turnquist","email":"gturnquist@pivotal.io","login":"gregturn","count":1},{"name":"Guillaume Rebesche","email":"38915436+ls-guillaume-rebesche","login":"ls-guillaume-rebesche","count":1},{"name":"Hassan El-seoudy","email":"hassan.elseoudy@gmail.com","login":"Hassan-Elseoudy","count":1},{"name":"Hervé Boutemy","email":"herve.boutemy@free.fr","login":"hboutemy","count":1},{"name":"Hesham Massoud","email":"heshamhamdymassoud@gmail.com","login":"heshamMassoud","count":1},{"name":"Igor Shymko","email":"igor.shimko@gmail.com","login":"ancane","count":1},{"name":"Ismail","email":"ismail-s","login":"ismail-s","count":1},{"name":"Jakub Skierbiszewski","email":"jskierbi@gmail.com","login":"jskierbi","count":1},{"name":"James Roper","email":"jroper@vz.net","login":"jroper","count":1},{"name":"James Wang","email":"java2enterprise@gmail.com","login":"jameswangz","count":1},{"name":"Jan Judas","email":"snugar.i@gmail.com","login":"kostislav","count":1},{"name":"Jan Lolling","email":"jan.lolling@gmail.com","login":"jlolling","count":1},{"name":"Jeff Schnitzer","email":"jeff@infohazard.org","login":"stickfigure","count":1},{"name":"JeffQuandt","email":"quandt.jeff@gmail.com","login":"JeffQuandt","count":1},{"name":"Jendrik Johannes","email":"jendrik.johannes@gmail.com","login":"jjohannes","count":1},{"name":"Jeong-yeop (Terence) Kim","email":"jyterencekim@gmail.com","login":"jyterencekim","count":1},{"name":"Jesper Blomquist","email":"jesper.blomquist@kry.se","login":"jebl01","count":1},{"name":"Jochen Schalanda","email":"jochen@schalanda.name","login":"joschi","count":1},{"name":"Joe Koshakow","email":"koshy44@gmail.com","login":"jkosh44","count":1},{"name":"Joe Littlejohn","email":"joelittlejohn@gmail.com","login":"joelittlejohn","count":1},{"name":"Joe Schafer","email":"joe.schafer@delta46.us","login":"jschaf","count":1},{"name":"Daniel Lobão","email":"dlobaosf@gmail.com","login":"lobaorn","count":1},{"name":"Daniel Purnomo","email":"danielpurnomo100@gmail.com","login":"kyooosukedn","count":1},{"name":"Daniel Wilkowski","email":"wilkowski.kontakt@gmail.com","login":"danon","count":1},{"name":"Daniel Wu","email":"daniel.y.woo@gmail.com","login":"DanielYWoo","count":1},{"name":"Dave Moten","email":"davidmoten@gmail.com","login":"davidmoten","count":1},{"name":"David Allison","email":"62114487+david-allison","login":"david-allison","count":1},{"name":"David Hoffman","email":"david.hoffman@target.com","login":"dhofftgt","count":1},{"name":"David Landis","email":"dlandis@gmail.com","login":"dlandis","count":1},{"name":"David Schlosnagle","email":"schlosna@gmail.com","login":"schlosna","count":1},{"name":"Deblock Thomas","email":"deblock.thomas.62@gmail.com","login":"deblockt","count":1},{"name":"Denis","email":"szczukocki.denis@gmail.com","login":"dszczukocki","count":1},{"name":"Dennis Kieselhorst","email":"mail@dekies.de","login":"deki","count":1},{"name":"Derek Straka","email":"derek@asterius.io","login":"derekstraka","count":1},{"name":"Edgar Asatryan","email":"17509127+nstdio","login":"nstdio","count":1},{"name":"Eduard Dudar","email":"edudar","login":"edudar","count":1},{"name":"Eduard Kalinicenko","email":"eduardische@gmail.com","login":"eduardische","count":1},{"name":"BokoEnos","email":"koen.bos@gmail.com","login":"BokoEnos","count":1},{"name":"Casasola Marcos","email":"mcasasola@gmail.com","login":"mcasasola","count":1},{"name":"Emiliano Clariá","email":"emiliano.claria@gmail.com","login":"emilianogc","count":1},{"name":"Fabian Lange","email":"lange.fabian@gmail.com","login":"CodingFabian","count":1},{"name":"Fantasy","email":"xiaofanms@outlook.com","login":"fantasy0v0","count":1},{"name":"Filip Hrisafov","email":"filip.hrisafov@gmail.com","login":"filiphr","count":1},{"name":"Francisco A. Lozano","email":"flozano@gmail.com","login":"flozano","count":1},{"name":"Mark Herkrath","email":"47814024+herkrath","login":"herkrath","count":1},{"name":"Mark Woon","email":"markwoon@gmail.com","login":"markwoon","count":1},{"name":"Mark van Cuijk","email":"github@mark.van-cuijk.nl","login":"phedny","count":1},{"name":"Martin Sivak","email":"msivak@redhat.com","login":"MarSik","count":1},{"name":"Martín Coll","email":"martingonzalezcoll@gmail.com","login":"colltoaction","count":1},{"name":"Matthew Dean","email":"deanmatthew16@gmail.com","login":"mattbdean","count":1},{"name":"Matthew Miller","email":"millem@amazon.com","login":"millems","count":1},{"name":"Matthias Cullmann","email":"matthias.cullmann@gmail.com","login":"culmat","count":1},{"name":"MeyerNils","email":"39691385+MeyerNils","login":"MeyerNils","count":1},{"name":"Mgamerz","email":"Mgamerz","login":"Mgamerz","count":1},{"name":"Migwel","email":"migonzalez1991@gmail.com","login":"Migwel","count":1},{"name":"Mike Weber","email":"mweber031@gmail.com","login":"mikethecalamity","count":1},{"name":"Misha","email":"mikeldpl@gmail.com","login":"mikeldpl","count":1},{"name":"Mohit Chugh","email":"mohitchugh@yahoo.com","login":"mohitchugh","count":1},{"name":"Morten Andersen-Gott","email":"morten.andersengott@gmail.com","login":"magott","count":1},{"name":"Naoki Takezoe","email":"takezoe@gmail.com","login":"takezoe","count":1},{"name":"Naveen","email":"172697+naveensrinivasan","login":"naveensrinivasan","count":1},{"name":"Neuman Vong","email":"neuman.vong@gmail.com","login":"luciferous","count":1},{"name":"Nicholas Rayburn","email":"52075362+nrayburn-tech","login":"nrayburn-tech","count":1},{"name":"Nick Benoit","email":"nick.benoit14@gmail.com","login":"nick-benoit14","count":1},{"name":"Nick Telford","email":"nick.telford@gmail.com","login":"nicktelford","count":1},{"name":"Oleksii Khomchenko","email":"akhomchenko@gmail.com","login":"akhomchenko","count":1},{"name":"Patrick Strawderman","email":"patrick@kilink.net","login":"kilink","count":1},{"name":"John Gardiner Myers","email":"jgmyers@proofpoint.com","login":"johngmyers","count":1},{"name":"Jon Harper","email":"jon.harper87@gmail.com","login":"jonenst","count":1},{"name":"Jonathan Gallimore","email":"jon@jrg.me.uk","login":"jgallimore","count":1},{"name":"Joren Inghelbrecht","email":"73221968+jin-harmoney","login":"jin-harmoney","count":1},{"name":"Joshua Sattler","email":"34030048+jsattler","login":"jsattler","count":1},{"name":"Kevin Binswanger","email":"kbinswanger@gmail.com","login":"Anusien","count":1},{"name":"Kirill Vlasov","email":"kirill.vlasov@devfactory.com","login":"kirill-vlasov","count":1},{"name":"Knut Wannheden","email":"knut@moderne.io","login":"knutwannheden","count":1},{"name":"Konstantin Labun","email":"konstantin.labun@gmail.com","login":"kulabun","count":1},{"name":"Konstantin Maliuga","email":"45214419+badoken","login":"badoken","count":1},{"name":"Kyrylo Merzlikin","email":"kirmerzlikin@gmail.com","login":"kirmerzlikin","count":1},{"name":"Lee Hyeonsoo","email":"znight1020@naver.com","login":"znight1020","count":1},{"name":"Leo Gertsenshteyn","email":"leoger@gmail.com","login":"leoger","count":1},{"name":"LiuYan","email":"lovetide@qq.com","login":"moontide","count":1},{"name":"Lucian H","email":"625085+symposion","login":"symposion","count":1},{"name":"Luciano Balmaceda","email":"balmacedaluciano@gmail.com","login":"lbalmaceda","count":1},{"name":"Lukasz Dywicki","email":"luke@code-house.org","login":"splatch","count":1},{"name":"M Rizky Satrio","email":"mrizkysatrio@gmail.com","login":"rsatrio","count":1},{"name":"MagikSquirrel","email":"MagikSquirrel","login":"MagikSquirrel","count":1},{"name":"Marcono1234","email":"Marcono1234","login":"Marcono1234","count":1},{"name":"Marcos Pereira","email":"marcos.silva@gmail.com","login":"marcospereira","count":1},{"name":"Marcus","email":"mgb.klimstra@gmail.com","login":"marcus-nl","count":1},{"name":"Mario Fusco","email":"mario.fusco@gmail.com","login":"mariofusco","count":1}],"past_year_committers":[{"name":"Tatu Saloranta","email":"tatu.saloranta@iki.fi","login":"cowtowncoder","count":782},{"name":"Kim, Joo Hyuk","email":"beanskobe@gmail.com","login":"JooHyukKim","count":31},{"name":"Jackson","email":"hyo961015@naver.com","login":"JacksonJang","count":22},{"name":"Lee Jiwon","email":"107186291+dlwldnjs1009","login":"dlwldnjs1009","count":17},{"name":"PJ Fanning","email":"pjfanning","login":"pjfanning","count":16},{"name":"dependabot[bot]","email":"49699333+dependabot[bot]","login":"dependabot[bot]","count":12},{"name":"Copilot","email":"198982749+Copilot","login":"Copilot","count":9},{"name":"Davyd Fridman","email":"davyd2000mail@gmail.com","login":"tiger9800","count":8},{"name":"wrongwrong","email":"k163377","login":"k163377","count":6},{"name":"김재헌","email":"127422627+jher235","login":"jher235","count":3},{"name":"flinter","email":"56645802+jhan0121","login":"jhan0121","count":2},{"name":"dalbrx-nitrobox","email":"144020665+dalbrx-nitrobox","login":"dalbrx-nitrobox","count":2},{"name":"Steven Kusuman","email":"52606428+cperkkk","login":"cperkkk","count":2},{"name":"Rob Winch","email":"362503+rwinch","login":"rwinch","count":2},{"name":"Michał Sobkiewicz","email":"perceptron8","login":"perceptron8","count":2},{"name":"Joshua Arnold","email":"josharnold52@gmail.com","login":"josharnold52","count":2},{"name":"Joost Koehoorn","email":"JoostK","login":"JoostK","count":2},{"name":"Johnny Lim","email":"izeye@naver.com","login":"izeye","count":2},{"name":"Hélios GILLES","email":"helios.gilles@gmail.com","login":"RoiSoleil","count":2},{"name":"Giulio Longfils","email":"giuliolongfils@gmail.com","login":"giulong","count":2},{"name":"MoritzR200","email":"66512903+MoritzR200","login":"MoritzR200","count":2},{"name":"Fouad Almalki","email":"me@fouad.io","login":"Eng-Fouad","count":2},{"name":"sri-adarsh-kumar","email":"33520984+sri-adarsh-kumar","login":"sri-adarsh-kumar","count":1},{"name":"mluckam","email":"mcl209@vt.edu","login":"mluckam","count":1},{"name":"f-aubert","email":"faubert.account@gmail.com","login":"f-aubert","count":1},{"name":"chanwonlee","email":"116537544+chanwonlee","login":"chanwonlee","count":1},{"name":"Viktor Szathmáry","email":"phraktle@gmail.com","login":"phraktle","count":1},{"name":"Victor Noël","email":"victornoel","login":"victornoel","count":1},{"name":"Tejas Attarde","email":"201814263+tejasae-afk","login":"tejasae-afk","count":1},{"name":"Stephen","email":"stephen.curran@est.tech","login":"stecurran-est-tech","count":1},{"name":"Rune Flobakk","email":"flobakk@gmail.com","login":"runeflobakk","count":1},{"name":"Nicholas Rayburn","email":"52075362+nrayburn-tech","login":"nrayburn-tech","count":1},{"name":"Marcono1234","email":"Marcono1234","login":"Marcono1234","count":1},{"name":"Lee Hyeonsoo","email":"znight1020@naver.com","login":"znight1020","count":1},{"name":"Knut Wannheden","email":"knut@moderne.io","login":"knutwannheden","count":1},{"name":"Jonas Konrad","email":"jonas.konrad@oracle.com","login":"yawkat","count":1},{"name":"Filip Hrisafov","email":"filip.hrisafov@gmail.com","login":"filiphr","count":1},{"name":"Daniel Purnomo","email":"danielpurnomo100@gmail.com","login":"kyooosukedn","count":1},{"name":"Benoit Chatain Lacelle","email":"benoit.chatain.lacelle@gmail.com","login":"blacelle","count":1},{"name":"Alexander Wirth","email":"alexander.wirth01@sap.com","login":"AlexanderWirthSAP","count":1},{"name":"Alessandro Nistico","email":"alienisty@gmail.com","login":"alienisty","count":1}],"commits_url":"https://commits.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/commits","host":{"name":"GitHub","url":"https://github.com","kind":"github","last_synced_at":"2026-06-03T00:00:11.051Z","repositories_count":6253429,"commits_count":884141443,"contributors_count":35039026,"owners_count":1162620,"icon_url":"https://github.com/github.png","host_url":"https://commits.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://commits.ecosyste.ms/api/v1/hosts/GitHub/repositories"}},"issues":{"table":{"full_name":"FasterXML/jackson-databind","html_url":"https://github.com/FasterXML/jackson-databind","last_synced_at":"2026-05-01T10:04:02.511Z","status":null,"issues_count":738,"pull_requests_count":1029,"avg_time_to_close_issue":50156709.79846449,"avg_time_to_close_pull_request":2629605.996742671,"issues_closed_count":521,"pull_requests_closed_count":921,"pull_request_authors_count":84,"issue_authors_count":484,"avg_comments_per_issue":4.955284552845528,"avg_comments_per_pull_request":1.8114674441205052,"merged_pull_requests_count":795,"bot_issues_count":1,"bot_pull_requests_count":51,"past_year_issues_count":85,"past_year_pull_requests_count":181,"past_year_avg_time_to_close_issue":563731.3409090909,"past_year_avg_time_to_close_pull_request":476978.2061068702,"past_year_issues_closed_count":44,"past_year_pull_requests_closed_count":131,"past_year_pull_request_authors_count":24,"past_year_issue_authors_count":54,"past_year_avg_comments_per_issue":3.847058823529412,"past_year_avg_comments_per_pull_request":1.7348066298342542,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":7,"past_year_merged_pull_requests_count":117,"created_at":"2023-05-15T13:56:25.030Z","updated_at":"2026-05-01T10:04:02.512Z","repository_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind","issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/FasterXML%2Fjackson-databind/issues","issue_labels_count":{"table":{"to-evaluate":204,"3.0":71,"has-failing-test":53,"2.18":41,"need-test-case":40,"Record":26,"2.19":26,"3.x":24,"2.17":18,"2.15":16,"2.20":14,"will-not-fix":14,"duplicate":13,"3.0-release-notes":13,"lombok":11,"property-discovery":10,"most-wanted":10,"enum":10,"pr-welcome":9,"2.16":8,"2.21":3,"3.2":3,"performance":3,"polymorphic-deduction":3,"objectid":3,"good first issue":3,"date-time-config":3,"property-iPhone":3,"2.14":2,"CVE":2,"3.1":2,"documentation":2,"node-config":1,"works-as-intended":1,"builder-related":1,"coercion-config":1,"spring":1,"android":1,"JDK11":1,"dependencies":1}},"pull_request_labels_count":{"table":{"dependencies":51,"cla-received":33,"2.19":28,"3.0":28,"2.18":20,"github_actions":13,"2.20":12,"3.0-release-notes":10,"2.17":8,"3.x":7,"most-wanted":3,"gen-ai":2,"date-time-config":2,"to-evaluate":2,"cla-needed":2,"2.21":2,"3.2":2,"Feat":1,"2.15":1,"2.16":1,"희수":1,"Refactor":1,"Record":1}},"issue_author_associations_count":{"table":{"NONE":507,"MEMBER":165,"CONTRIBUTOR":66}},"pull_request_author_associations_count":{"table":{"MEMBER":717,"CONTRIBUTOR":216,"NONE":94,"OWNER":1,"COLLABORATOR":1}},"issue_authors":{"table":{"cowtowncoder":133,"pjfanning":19,"k163377":17,"JooHyukKim":11,"sdeleuze":10,"yihtserns":7,"odrotbohm":7,"nlisker":6,"garretwilson":5,"quaff":4,"joca-bt":4,"hajdamak":4,"ludgerb":3,"Gems":3,"cowwoc":3,"Javed6234":2,"matteobertozzi":2,"jhaber":2,"hjohn":2,"mumukiller":2,"GeorgiPetkov":2,"stickfigure":2,"SaiKrishna369":2,"Artur-":2,"herkrath":2,"pmihalcin":2,"ThatSneakyRaccoon":2,"raderio":2,"carterkozak":2,"alzimmermsft":2,"arvgord":2,"seadbrane":2,"Asayu233":2,"wendigo":2,"winfriedgerlach":2,"doljae":2,"Xfel":2,"blacelle":2,"lbenedetto":2,"arlampin":2,"jpraet":2,"Aravinda93":2,"Dragas":2,"ivamly":2,"retrodaredevil":2,"emlun":2,"toonborgers":2,"lpandzic":2,"caodangtinh":1,"stolsvik":1,"coriedai":1,"dinopraso":1,"skjolber":1,"SimonCockx":1,"aelgn":1,"StuAtGit":1,"eddumelendez":1,"wdallastella":1,"nickstolwijk":1,"dmelisso":1,"qunv":1,"antoinelauzon-bell":1,"kaqqao":1,"gssbzn":1,"pn-santos":1,"mikereiche":1,"HarshSainiJobvite":1,"meier-th":1,"akefirad":1,"khogeland":1,"NielsDoucet":1,"ZeroOne3010":1,"detomarco":1,"alesj":1,"dirk-olmes":1,"ayv19":1,"mathiasarens":1,"dependabot[bot]":1,"shoteff":1,"neXus1987":1,"KentaYoshii":1,"Mariamalmesfer":1,"lewisse":1,"martin-frydl":1,"pstreef":1,"noahzuch":1,"C-B-B":1,"lorenzbaier":1,"zengkid":1,"bwzhang2011":1,"a6dang":1,"shawkins":1,"Jerry-X07":1,"HelloOO7":1,"molexx":1,"fangzhen":1,"JinseongHwang":1,"xyxz-web":1,"ljnelson":1,"Boeing1337":1,"mkowaliszyn-coursera":1,"lenrok258":1,"nvafiades":1,"u3r":1,"codingtim":1,"yulu-deer":1,"sbailliez":1,"kfyty":1,"MBurchard":1,"tuscland":1,"nikita2206":1,"DmitryBezzub":1,"zrlw":1,"dominik-henning":1,"asardaes":1,"dkubicki":1,"StefanVanDyck":1,"reinaldo-besen":1,"MrMaxxan":1,"lbonco":1,"cradloff":1,"cooperlyt":1,"miridih-jshwang":1,"burdoto":1,"xathien":1,"jakub-bochenski":1,"bernd":1,"guoamocker":1,"jkuhn1":1,"sezinkarli":1,"maroony":1,"sseelmann":1,"becky-sequence":1,"ben-spiller":1,"sikorskii":1,"gregorriegler":1,"gotson":1,"xlm13x":1,"zshamrock":1,"pritibiyani":1,"JITU960":1,"kilink":1,"Whi7y":1,"luozhenyu":1,"plovell":1,"DylanTheDeveloper":1,"aimboden":1,"anand188":1,"bxvpm":1,"ajacob":1,"zhiyiChow":1,"wilkinsona":1,"dhoffer":1,"xenoterracide":1,"el-denis":1,"kostousov-ds":1,"dweiss":1,"jonjanisch":1,"slutmaker":1,"richard-melvin":1,"TomCLForwood":1,"shivsrivastava":1,"EAlf91":1,"jam0380":1,"joongsoo":1,"perelengo":1,"dalira":1,"ashok-oweal":1,"aerisnju":1,"sergeykashin":1,"rocketraman":1,"miguelocarvajal":1,"michaelcdillon":1,"chuanwise":1,"avinashpvas":1,"Woodz":1,"2Ruk":1,"SandeepGaur2016":1,"vghero":1,"jafarre-bi":1,"anjaliguptaz":1,"drahkrub":1,"blommish":1,"mddcoder25":1,"krichter722":1,"gbaso":1,"symposion":1,"rajanya":1,"jessebarnum":1,"Mr-LiuDC":1,"Asapin":1,"tanayhub":1,"mikethecalamity":1,"spremthi57":1,"wimdeblauwe":1,"optyler":1,"johnjohndoe":1,"NWilson":1,"bimargulies":1,"Saransh0905":1,"ekgns33":1,"b-behan":1,"idoub":1,"leventov":1,"bantu":1,"amareshdlphx":1,"galan":1,"benson-basis":1,"samawarad":1,"tsegall":1,"andirady":1,"KyryloSemenkoDiversium":1,"Wolvinny":1,"Logic-32":1,"Horus1337":1,"Romain-P":1,"josevsgeon":1,"joaocanaverde-blue":1,"robrat":1,"verve111":1,"black-snow":1,"GI-2023":1,"reisners":1,"swpalmer-cl":1,"Tillerino":1,"afattahi54":1,"cndoublehero":1,"feg545":1,"abhiptl":1,"ThanksForAllTheFish":1,"raya-simeonova":1,"ryegleason":1,"Badbond":1,"hannyu":1,"akastyka":1,"JoergHeinicke5005":1,"rdehuyss":1,"jamesmudd":1,"MartinHaeusler":1,"jlous":1,"cemo":1,"laurenzfromme5":1,"Davio":1,"cjdxhjj":1,"oujesky":1,"jonenst":1,"martin-sladecek":1,"DavidIAm":1,"k631583871":1,"seekM":1,"iuppal":1,"re-thc":1,"hetot":1,"agavrilov76":1,"serpro69":1,"jin-harmoney":1,"xehonk":1,"G0dC0der":1,"paolobazzi":1,"migmruiz":1,"pdegoeje":1,"yacine-pc":1,"victorgcapone":1,"stan9333":1,"ispringer":1,"brownp2k":1,"nilswieber":1,"drapej":1,"blydd":1,"Albertwaninge":1,"bungder":1,"mattlocker":1,"jmesny":1,"mariofusco":1,"raphw":1,"alwins0n":1,"Shanzeee":1,"ooraini":1,"taoes":1,"JBodkin-Amphora":1,"rgoldberg":1,"emmersonbonnat-tw":1,"chkp-royl":1,"gary-sedgwick":1,"ivan-zaitsev":1,"garkin":1,"nvervelle":1,"cassiomolin":1,"badmannersteam":1,"JuHyun419":1,"requiel20":1,"EarthCitizen":1,"bric3":1,"qq664042":1,"zhenlin-pay2":1,"geekbeast":1,"Incara":1,"AndreasBrieg":1,"radulecu":1,"AlvaroBrey":1,"kistlers":1,"josephlbarnett":1,"XakepSDK":1,"GedMarc":1,"libetl":1,"ragnhov":1,"stevestorey":1,"dukeyin":1,"devdanylo":1,"skohlmann":1,"vananiev":1,"bthelen":1,"kmorozov":1,"lukehutch":1,"apjoseph":1,"davidmoten":1,"Aibing168":1,"CAGeng":1,"cpuzicha":1,"balram0694":1,"sbertault":1,"GregoireW":1,"cor3000":1,"emouty":1,"vinstanis":1,"seanhexl":1,"shoaibjo":1,"LSwiatek":1,"D3v01dZA":1,"driverpt":1,"henning-meinhardt":1,"lost-carrier":1,"jearton":1,"k-wall":1,"oleksiimiroshnyk":1,"motlin":1,"emilyy-dev":1,"martinpaljak":1,"stefanCotruta":1,"Wouter1":1,"maleeeei":1,"MikePryadko":1,"lucky8987":1,"dodie":1,"cndqjacndqja":1,"mp911de":1,"lucascloarec":1,"XYZboom":1,"emilkostadinov":1,"philsttr":1,"plevart":1,"dude-abides":1,"markwoon":1,"ZikFat":1,"rohanlopes20":1,"michaelhixson":1,"stevenschlansker":1,"marinier":1,"phraktle":1,"jhorstmann":1,"teodord":1,"kulame":1,"debjitk":1,"martel":1,"foxdk":1,"gurgl":1,"lnthai2002":1,"arjunpidugu642":1,"Grzegorz-Zarnowiecki":1,"Hunter-Lam":1,"lathspell":1,"winitzki":1,"caalador":1,"effx13":1,"varjoranta":1,"LichKing-lee":1,"fleiber":1,"Guy2You":1,"fulcrum70":1,"edudar":1,"clo-vis":1,"denyshorman":1,"zipper01":1,"kylejmcintyre":1,"jlaber":1,"etrandafir93":1,"Yaklede":1,"lalilulelo1986":1,"UnquietCode":1,"eoghanoh2":1,"mishako":1,"teammakdi":1,"markelliot":1,"yunchuan1883":1,"nstdio":1,"susanw1":1,"fabienfleureau":1,"fdutton":1,"norrisjeremy":1,"RutledgePaulV":1,"askoog":1,"dhs3000":1,"softqwewasd":1,"l0rinc":1,"yawkat":1,"onewhoisnot":1,"dstepanov":1,"qianlong":1,"liblit":1,"kiriakos":1,"sholavanalli":1,"nathanabercrombie":1,"soc":1,"zenith7781":1,"kirmerzlikin":1,"ionutcapitanu":1,"apeteri":1,"dev-chirag":1,"wesleyking0":1,"ptanov":1,"Njimefo":1,"mjustin":1,"Jump2nj":1,"rwinch":1,"cmelchior":1,"cristian-mocanu-mob":1,"Lorondos":1,"andriewski":1,"mechelleamily":1,"fc76gsk":1,"nathanukey":1,"sonikjunior":1,"MaximValeev":1,"guoai2015":1,"mathijs81":1,"dnault":1,"fransflippo":1,"NikolayMetchev":1,"aurimasniekis":1,"zman0900":1,"Captain-P-Goldfish":1,"donalmurtagh":1,"jayjaehunchoi":1,"jayeshj100":1,"fandreuz":1,"florianLaforest":1,"bwaldvogel":1,"mijutu":1,"sbernard31":1,"AndreasHuber-CH":1,"formingform":1,"JanStureNielsen":1,"jwgmeligmeyling":1,"SamBarker":1,"HristoP96":1,"dbachdev":1,"maliksajidhussain":1,"YutaHiguchi-bsn":1,"kalyan-dass":1,"gusega":1,"chrylis":1,"numeralnathan":1,"jebl01":1,"usfalami":1,"chris-dekker":1,"Saljack":1,"hankolerd":1,"austinarbor":1,"abarsov":1,"aivinog1":1,"gustavodaquino":1,"gsmet":1,"NoahELE":1,"rrahman-brex":1,"djohs":1,"vbarhatov":1,"hsz":1,"riskop":1,"git-chenhao":1,"scottslewis":1,"Mochis":1,"christophercurrie":1,"ehdrms2034":1,"leifhanack":1}},"pull_request_authors":{"table":{"cowtowncoder":375,"JooHyukKim":278,"pjfanning":109,"dependabot[bot]":51,"k163377":19,"yihtserns":14,"timo-a":8,"giulong":7,"hannyu":7,"iifawzi":6,"zhenlin":6,"stevenschlansker":6,"JacksonJang":5,"digulla":4,"sigpwned":4,"rikkarth":4,"ggrebert":4,"rohanlopes20":4,"Godin":4,"davidmoten":4,"lbenedetto":4,"badoken":4,"mukham12":3,"herkrath":3,"blacelle":3,"mcvayc":3,"Gems":3,"carterkozak":3,"yawkat":3,"Philzen":3,"SandeepGaur2016":2,"dropofwill":2,"jjohannes":2,"dlwldnjs1009":2,"rschmitt":2,"jin-harmoney":2,"sebastianbrunnert":2,"fxshlein":2,"glorrian":2,"songsunkook":2,"runeflobakk":2,"lobaorn":2,"mikethecalamity":2,"dancer1325":2,"wesleyking0":2,"izeye":2,"LokeshN":2,"SamBarker":2,"raisagandi":2,"kilink":2,"sashikanthr":2,"eeren-bm":2,"oddbjornkvalsund":2,"eranl":1,"vdaniloff":1,"zhanbei1":1,"kirmerzlikin":1,"120011676":1,"drekbour":1,"stecurran-est-tech":1,"mariofusco":1,"kfyty":1,"plevart":1,"sri-adarsh-kumar":1,"TaylorSMarks":1,"mluckam":1,"ceggert87":1,"SealSagish":1,"stevestorey":1,"kyooosukedn":1,"ilia-beliaev-miro":1,"jebl01":1,"edudar":1,"LichKing-lee":1,"f-aubert":1,"divan-9":1,"hs201016":1,"knutwannheden":1,"tiger9800":1,"matiasah":1,"millems":1,"findepi":1,"kariem":1,"filiphr":1,"devefx":1}},"host":{"table":{"name":"GitHub","url":"https://github.com","kind":"github","last_synced_at":"2026-05-02T00:00:10.923Z","repositories_count":14457904,"issues_count":34067164,"pull_requests_count":111820255,"authors_count":11251274,"icon_url":"https://github.com/github.png","host_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories","owners_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/owners","authors_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors"}},"past_year_issue_labels_count":{"table":{"to-evaluate":33,"3.0":18,"2.20":8,"3.0-release-notes":4,"objectid":3,"2.19":3,"has-failing-test":3,"3.2":2,"3.1":2,"Record":2,"2.21":2,"will-not-fix":1,"enum":1,"lombok":1,"need-test-case":1,"property-discovery":1,"property-iPhone":1,"pr-welcome":1}},"past_year_pull_request_labels_count":{"table":{"3.0":7,"github_actions":7,"dependencies":7,"2.20":5,"3.0-release-notes":5,"cla-received":3,"gen-ai":2,"3.2":2,"2.19":2,"most-wanted":2,"2.21":2,"Refactor":1,"3.x":1,"Feat":1,"희수":1}},"past_year_issue_author_associations_count":{"table":{"NONE":54,"MEMBER":23,"CONTRIBUTOR":8}},"past_year_pull_request_author_associations_count":{"table":{"MEMBER":122,"CONTRIBUTOR":34,"NONE":20,"COLLABORATOR":1}},"past_year_issue_authors":{"table":{"cowtowncoder":20,"k163377":5,"odrotbohm":3,"sdeleuze":3,"wendigo":2,"Artur-":2,"nlisker":2,"JooHyukKim":2,"perelengo":1,"oleksiimiroshnyk":1,"norrisjeremy":1,"mikethecalamity":1,"mikereiche":1,"mijutu":1,"mattlocker":1,"lukehutch":1,"lucascloarec":1,"philsttr":1,"pjfanning":1,"quaff":1,"rdehuyss":1,"riskop":1,"rwinch":1,"Saransh0905":1,"scottslewis":1,"skjolber":1,"tsegall":1,"usfalami":1,"wilkinsona":1,"2Ruk":1,"aimboden":1,"alzimmermsft":1,"AndreasHuber-CH":1,"caalador":1,"cjdxhjj":1,"clo-vis":1,"cndoublehero":1,"cndqjacndqja":1,"DmitryBezzub":1,"dnault":1,"donalmurtagh":1,"dstepanov":1,"eddumelendez":1,"emouty":1,"garretwilson":1,"guoamocker":1,"HelloOO7":1,"jafarre-bi":1,"JBodkin-Amphora":1,"josephlbarnett":1,"KentaYoshii":1,"kfyty":1,"laurenzfromme5":1,"LSwiatek":1}},"past_year_pull_request_authors":{"table":{"cowtowncoder":75,"JooHyukKim":38,"k163377":11,"pjfanning":9,"dependabot[bot]":7,"giulong":5,"hannyu":5,"JacksonJang":5,"dlwldnjs1009":2,"stevenschlansker":2,"runeflobakk":2,"rohanlopes20":2,"izeye":2,"kyooosukedn":1,"sri-adarsh-kumar":1,"stecurran-est-tech":1,"tiger9800":1,"kfyty":1,"kariem":1,"ilia-beliaev-miro":1,"hs201016":1,"filiphr":1,"f-aubert":1,"eranl":1,"blacelle":1}},"maintainers":[{"table":{"login":"cowtowncoder","count":508,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/cowtowncoder"}},{"table":{"login":"JooHyukKim","count":240,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/JooHyukKim"}},{"table":{"login":"pjfanning","count":128,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/pjfanning"}},{"table":{"login":"yawkat","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/yawkat"}},{"table":{"login":"divan-9","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/divan-9"}},{"table":{"login":"christophercurrie","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/christophercurrie"}},{"table":{"login":"hs201016","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hs201016"}},{"table":{"login":"khogeland","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/khogeland"}}],"active_maintainers":[{"table":{"login":"cowtowncoder","count":95,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/cowtowncoder"}},{"table":{"login":"JooHyukKim","count":40,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/JooHyukKim"}},{"table":{"login":"pjfanning","count":10,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/pjfanning"}},{"table":{"login":"hs201016","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hs201016"}}]}},"events":{"total":{"CreateEvent":167,"CommitCommentEvent":4,"IssuesEvent":532,"WatchEvent":128,"DeleteEvent":148,"IssueCommentEvent":1835,"PushEvent":1261,"PullRequestEvent":553,"PullRequestReviewEvent":560,"PullRequestReviewCommentEvent":450,"ForkEvent":79},"last_year":{"CreateEvent":167,"CommitCommentEvent":4,"IssuesEvent":532,"WatchEvent":128,"DeleteEvent":148,"IssueCommentEvent":1835,"PushEvent":1261,"PullRequestEvent":553,"PullRequestReviewEvent":560,"PullRequestReviewCommentEvent":450,"ForkEvent":79}},"keywords":["hacktoberfest","jackson","jackson-databind","json"],"dependencies":[{"ecosystem":"actions","filepath":".github/workflows/cifuzz.yml","sha":null,"kind":"manifest","created_at":"2023-01-13T12:00:23.130Z","updated_at":"2023-01-13T12:00:23.130Z","repository_link":"https://github.com/FasterXML/jackson-databind/blob/3.x/.github/workflows/cifuzz.yml","dependencies":[{"id":6875739552,"package_name":"google/oss-fuzz/infra/cifuzz/actions/build_fuzzers","ecosystem":"actions","requirements":"master","direct":true,"kind":"composite","optional":false},{"id":6875739553,"package_name":"google/oss-fuzz/infra/cifuzz/actions/run_fuzzers","ecosystem":"actions","requirements":"master","direct":true,"kind":"composite","optional":false},{"id":6875739554,"package_name":"actions/upload-artifact","ecosystem":"actions","requirements":"v3","direct":true,"kind":"composite","optional":false}]},{"ecosystem":"actions","filepath":".github/workflows/codeql-analysis.yml","sha":null,"kind":"manifest","created_at":"2023-01-13T12:00:23.252Z","updated_at":"2023-01-13T12:00:23.252Z","repository_link":"https://github.com/FasterXML/jackson-databind/blob/3.x/.github/workflows/codeql-analysis.yml","dependencies":[{"id":6875739566,"package_name":"actions/checkout","ecosystem":"actions","requirements":"v3.3.0","direct":true,"kind":"composite","optional":false},{"id":6875739567,"package_name":"github/codeql-action/init","ecosystem":"actions","requirements":"v2","direct":true,"kind":"composite","optional":false},{"id":6875739568,"package_name":"github/codeql-action/autobuild","ecosystem":"actions","requirements":"v2","direct":true,"kind":"composite","optional":false},{"id":6875739569,"package_name":"github/codeql-action/analyze","ecosystem":"actions","requirements":"v2","direct":true,"kind":"composite","optional":false}]},{"ecosystem":"actions","filepath":".github/workflows/main.yml","sha":null,"kind":"manifest","created_at":"2023-01-13T12:00:23.399Z","updated_at":"2023-01-13T12:00:23.399Z","repository_link":"https://github.com/FasterXML/jackson-databind/blob/3.x/.github/workflows/main.yml","dependencies":[{"id":6875739572,"package_name":"actions/checkout","ecosystem":"actions","requirements":"v3.3.0","direct":true,"kind":"composite","optional":false},{"id":6875739573,"package_name":"actions/setup-java","ecosystem":"actions","requirements":"v3","direct":true,"kind":"composite","optional":false},{"id":6875739574,"package_name":"codecov/codecov-action","ecosystem":"actions","requirements":"v3","direct":true,"kind":"composite","optional":false}]},{"ecosystem":"maven","filepath":"pom.xml","sha":null,"kind":"manifest","created_at":"2023-07-06T22:16:27.781Z","updated_at":"2023-07-06T22:16:27.781Z","repository_link":"https://github.com/FasterXML/jackson-databind/blob/3.x/pom.xml","dependencies":[{"id":11169914574,"package_name":"com.fasterxml.jackson.core:jackson-annotations","ecosystem":"maven","requirements":"${jackson.version.annotations}","direct":true,"kind":"runtime","optional":false},{"id":11169914579,"package_name":"com.fasterxml.jackson.core:jackson-core","ecosystem":"maven","requirements":"${jackson.version.core}","direct":true,"kind":"runtime","optional":false},{"id":11169914583,"package_name":"org.junit.vintage:junit-vintage-engine","ecosystem":"maven","requirements":null,"direct":true,"kind":"test","optional":false},{"id":11169914586,"package_name":"org.junit.jupiter:junit-jupiter","ecosystem":"maven","requirements":null,"direct":true,"kind":"test","optional":false},{"id":11169914589,"package_name":"org.powermock:powermock-core","ecosystem":"maven","requirements":"2.0.9","direct":true,"kind":"test","optional":false},{"id":11169914591,"package_name":"org.powermock:powermock-module-junit4","ecosystem":"maven","requirements":"2.0.9","direct":true,"kind":"test","optional":false},{"id":11169914594,"package_name":"org.powermock:powermock-api-mockito2","ecosystem":"maven","requirements":"2.0.9","direct":true,"kind":"test","optional":false},{"id":11169914597,"package_name":"com.google.guava:guava-testlib","ecosystem":"maven","requirements":"31.1-jre","direct":true,"kind":"test","optional":false},{"id":11169916007,"package_name":"javax.measure:jsr-275","ecosystem":"maven","requirements":"0.9.1","direct":true,"kind":"test","optional":false},{"id":11169916183,"package_name":"org.openjdk.jol:jol-core","ecosystem":"maven","requirements":"0.16","direct":true,"kind":"test","optional":false},{"id":11169916184,"package_name":"org.junit:junit-bom","ecosystem":"maven","requirements":"5.9.2","direct":true,"kind":"import","optional":false}]},{"ecosystem":"actions","filepath":".github/workflows/dep_build.yml","sha":null,"kind":"manifest","created_at":"2024-05-11T19:47:46.960Z","updated_at":"2024-05-11T19:47:46.960Z","repository_link":"https://github.com/FasterXML/jackson-databind/blob/3.x/.github/workflows/dep_build.yml","dependencies":[{"id":18033065887,"package_name":"actions/checkout","ecosystem":"actions","requirements":"0ad4b8fadaa221de15dcec353f45205ec38ea70b","direct":true,"kind":"composite","optional":false},{"id":18033065888,"package_name":"actions/setup-java","ecosystem":"actions","requirements":"99b8673ff64fbf99d8d325f52d9a5bdedb8483e9","direct":true,"kind":"composite","optional":false}]},{"ecosystem":"actions","filepath":".github/workflows/trigger_dep_builds.yml","sha":null,"kind":"manifest","created_at":"2024-05-11T19:47:46.973Z","updated_at":"2024-05-11T19:47:46.973Z","repository_link":"https://github.com/FasterXML/jackson-databind/blob/3.x/.github/workflows/trigger_dep_builds.yml","dependencies":[{"id":18033065889,"package_name":"peter-evans/repository-dispatch","ecosystem":"actions","requirements":"v3","direct":true,"kind":"composite","optional":false}]}],"score":37.68037073813136,"created_at":"2025-08-29T06:41:49.680Z","updated_at":"2026-06-20T07:01:10.408Z","avatar_url":"https://github.com/FasterXML.png","language":"Java","codemeta":null,"publiccode":null,"project_url":"https://summary.ecosyste.ms/api/v1/projects/362724","html_url":"https://summary.ecosyste.ms/projects/362724"}