Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
Jackson Core library may allow data tampering
published 7 days ago
Summary
The Jackson Core library used for processing JSON data contains a security weakness that could let an attacker modify or corrupt data. Updating to the newer version provided by TuxCare resolves the issue. Apply the updated package (2.14.3‑tuxcare.2) to keep your applications safe.
What to do
- Update fasterxml com.fasterxml.jackson.core:jackson-core to version 2.14.3-tuxcare.2.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| TuxCare:Maven | fasterxml | com.fasterxml.jackson.core:jackson-core |
>= 2.14.3, < 2.14.3-tuxcare.2 Fix: upgrade to 2.14.3-tuxcare.2
|
Original advisory text
TuxCare security update for com.fasterxml.jackson.core:jackson-core (1 CVE)
TuxCare rebuilt com.fasterxml.jackson.core:jackson-core to address 1 CVE. Fixed in 2.14.3-tuxcare.2.
Timeline
Published28 Oct 2026
Updated28 Oct 2026
First seen28 Oct 2026
Sources
CLSA-2026-1793196650 · OSV
Track software like this
Free during beta