Jackson Coreutils
Approved changes feed: RSS · Atom
cpe:2.3:a:java-json-tools:jackson-coreutils:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Java Json Tools (42783357-0dc9-57fe-ac17-f89288b43f1e) |
|---|---|
| Product | Jackson Coreutils (305cca69-3c37-55c2-a1ad-ec0eda447c39) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-86511 |
vulnerable | 2026-09-16 04:32:58.901780 |
java-json-tools jackson-coreutils JacksonUtils.java BigDecimal.toPlainString resource consumption
MEDIUM (5.3)
A vulnerability was found in java-json-tools jackson-coreutils 2.0. Affected by this vulnerability is the function BigDecimal.toPlainString of the file src/main/java/com/github/fge/jackson/JacksonUtils.java. Performing a manipulation results in resource consumption. The attack may be initiated remotely. The exploit has been made public and could be used. The project was informed of the problem early through an issue report but has not responded yet.
Published: 2026-09-08T02:00:09.584Z
Updated: 2026-09-08T12:34:05.369Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-86321 |
vulnerable | 2026-09-16 04:32:58.896249 |
java-json-tools jackson-coreutils URL Validation JsonLoader.java JsonLoader.fromURL server-side request forgery
MEDIUM (5.3)
A vulnerability was found in java-json-tools jackson-coreutils 2.0. Affected by this issue is the function JsonLoader.fromURL of the file src/main/java/com/github/fge/jackson/JsonLoader.java of the component URL Validation. The manipulation results in server-side request forgery. It is possible to launch the attack remotely. The exploit has been made public and could be used. The project was informed of the problem early through an issue report but has not responded yet.
Published: 2026-09-07T15:00:11.032Z
Updated: 2026-09-08T12:47:23.481Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-86513 |
vulnerable | 2026-09-16 04:32:58.471794 |
java-json-tools jackson-coreutils JSON Pointer parser TreePointer.java TreePointer.tokensFromInput allocation of resources
MEDIUM (5.3)
A security flaw has been discovered in java-json-tools jackson-coreutils 2.0. This vulnerability affects the function TreePointer.tokensFromInput of the file src/main/java/com/github/fge/jackson/jsonpointer/TreePointer.java of the component JSON Pointer parser. The manipulation results in allocation of resources. The attack can be executed remotely. The exploit has been released to the public and may be used for attacks. The project was informed of the problem early through an issue report but has not responded yet.
Published: 2026-09-08T02:30:12.110Z
Updated: 2026-09-08T12:28:08.527Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.