PatchTheCVEjackson-databind vulnerabilities and fixes
Recent CVEs affecting jackson-databind, with upgrade or downgrade steps. 8 tracked.
Also searched as: jackson databind.
jackson-databind has 8 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 8. Most recent: 2026-06-23. Highest priority: CVE-2026-54512 (score 54/100).
- CVE-2026-54512 HIGH 8.1 UPGRADE jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Proce
- CVE-2026-54513 HIGH 8.1 UPGRADE jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Proce
- CVE-2026-50193 HIGH 7.5 UPGRADE jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Proce
- CVE-2026-54518 MEDIUM 6.5 UPGRADE jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Proce
- CVE-2026-54515 MEDIUM 5.3 UPGRADE jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Proce
- CVE-2026-54516 MEDIUM 5.3 UPGRADE jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Proce
- CVE-2026-54517 MEDIUM 5.3 UPGRADE jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Proce
- CVE-2026-54514 MEDIUM 5.3 UPGRADE jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Proce
FAQ
How do I fix jackson-databind vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is jackson-databind being exploited right now?
None of the tracked jackson-databind CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which jackson-databind CVE should I patch first?
CVE-2026-54512 currently ranks highest (54/100): jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Proce.