Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
Jackson Databind library may let attackers run code
published 5 days ago
Summary
Four security weaknesses have been found in the Jackson Databind component that many Java applications rely on. If left unpatched, a malicious user could cause the program to execute their own code, potentially exposing or corrupting data. Apply the TuxCare update to version 2.13.1‑tuxcare.3 right away to close the risk.
What to do
- Update fasterxml com.fasterxml.jackson.core:jackson-databind to version 2.13.1-tuxcare.3.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| TuxCare:Maven | fasterxml | com.fasterxml.jackson.core:jackson-databind |
>= 2.13.1, < 2.13.1-tuxcare.3 Fix: upgrade to 2.13.1-tuxcare.3
|
Original advisory text
TuxCare security update for com.fasterxml.jackson.core:jackson-databind (4 CVEs)
TuxCare rebuilt com.fasterxml.jackson.core:jackson-databind to address 4 CVEs. Fixed in 2.13.1-tuxcare.3.
Timeline
Published30 Oct 2026
Updated30 Oct 2026
First seen30 Oct 2026
Sources
CLSA-2026-1793363147 · OSV
Track software like this
Free during beta