Linux
jackson-databind security updates
Patch Radar has 39 security fixes for jackson-databind, closing 56 CVEs, 2 of which are being exploited. The newest is RHSA-2026:90909 (0:2.21.4-1.module+el8.10.0+25128+a2644b4c.1), released October 29, 2026.
2 exploited CVEs
Latest version
n/a
Release date not known
Security fixes
39
On record in Patch Radar
CVEs
56
Closed by those fixes
Exploited
2
Vendor report or CISA KEV
Security fixes, newest first
| Priority | Fix | Release | Fixed in | CVEs | Exploited | Released |
|---|---|---|---|---|---|---|
| High | RHSA-2026:90909 | RHEL 8 | 0:2.21.4-1.module+el8.10.0+25128+a2644b4c.1 | 3 | Oct 29, 2026 | |
| Urgent | DEBIAN-CVE-2026-110879 | Debian 14 | 2.22.4-1 | 1 | Oct 28, 2026 | |
| High | DEBIAN-CVE-2026-91776 | Debian 14 | 2.18.11-1 | 1 | Oct 20, 2026 | |
| High | DEBIAN-CVE-2026-91777 | Debian 14 | 2.18.11-1 | 1 | Oct 20, 2026 | |
| High | DEBIAN-CVE-2026-68497 | Debian 14 | 2.18.11-1 | 1 | Sep 11, 2026 | |
| Routine | DEBIAN-CVE-2026-83557 | Debian 14 | 2.18.11-1 | 1 | Sep 1, 2026 | |
| Routine | DEBIAN-CVE-2026-19032 | Debian 14 | 2.18.11-1 | 1 | Sep 1, 2026 | |
| High | RHSA-2026:43218 | RHEL 8 | 0:2.21.4-1.module+el8.10.0+24523+f75fb079 | 1 | Jul 22, 2026 | |
| High | DEBIAN-CVE-2026-50193 | Debian 12.15 (bookworm) | 2.14.0-1 | 1 | Jul 10, 2026 | |
| High | DEBIAN-CVE-2026-50193 | Debian 13.5 (trixie) | 2.14.0-1 | 1 | Jul 10, 2026 | |
| High | DEBIAN-CVE-2026-50193 | Debian 14 | 2.14.0-1 | 1 | Jul 10, 2026 | |
| High | DEBIAN-CVE-2026-54513 | Debian 14 | 2.18.11-1 | 1 | Jun 23, 2026 | |
| High | DEBIAN-CVE-2026-54512 | Debian 14 | 2.18.11-1 | 1 | Jun 23, 2026 | |
| Routine | DEBIAN-CVE-2026-54515 | Debian 14 | 2.18.11-1 | 1 | Jun 23, 2026 | |
| Routine | DEBIAN-CVE-2026-54514 | Debian 14 | 2.18.11-1 | 1 | Jun 23, 2026 | |
| High | RHSA-2025:14126 | RHEL 8 | 0:2.19.1-1.module+el8.10.0+23380+f6e7434b | 1 | Aug 20, 2025 | |
| High | RHSA-2024:3061 | RHEL 8 | 0:2.14.2-1.module+el8.10.0+20993+d0f024b0 | 1 | May 22, 2024 | |
| High | DEBIAN-CVE-2021-46877 | Debian 12.15 (bookworm) | 2.13.2.2-1 | 1 | Mar 18, 2023 | |
| High | DEBIAN-CVE-2021-46877 | Debian 13.5 (trixie) | 2.13.2.2-1 | 1 | Mar 18, 2023 | |
| High | DEBIAN-CVE-2021-46877 | Debian 14 | 2.13.2.2-1 | 1 | Mar 18, 2023 | |
| High | DEBIAN-CVE-2020-10650 | Debian 12.15 (bookworm) | 2.11.1-1 | 1 | Dec 26, 2022 | |
| High | DEBIAN-CVE-2020-10650 | Debian 13.5 (trixie) | 2.11.1-1 | 1 | Dec 26, 2022 | |
| High | DEBIAN-CVE-2020-10650 | Debian 14 | 2.11.1-1 | 1 | Dec 26, 2022 | |
| High | DSA-5283-1 | Debian 11.6 (bullseye) | 2.12.1-1+deb11u1 | 1 | Nov 17, 2022 | |
| High | DEBIAN-CVE-2022-42004 | Debian 12.15 (bookworm) | 2.14.0-1 | 1 | Oct 2, 2022 | |
| High | DEBIAN-CVE-2022-42004 | Debian 13.5 (trixie) | 2.14.0-1 | 1 | Oct 2, 2022 | |
| High | DEBIAN-CVE-2022-42004 | Debian 14 | 2.14.0-1 | 1 | Oct 2, 2022 | |
| High | DEBIAN-CVE-2022-42003 | Debian 12.15 (bookworm) | 2.14.0-1 | 1 | Oct 2, 2022 | |
| High | DEBIAN-CVE-2022-42003 | Debian 13.5 (trixie) | 2.14.0-1 | 1 | Oct 2, 2022 | |
| High | DEBIAN-CVE-2022-42003 | Debian 14 | 2.14.0-1 | 1 | Oct 2, 2022 | |
| High | DEBIAN-CVE-2020-36518 | Debian 12.15 (bookworm) | 2.13.2.2-1 | 1 | Mar 11, 2022 | |
| High | DEBIAN-CVE-2020-36518 | Debian 13.5 (trixie) | 2.13.2.2-1 | 1 | Mar 11, 2022 | |
| High | DEBIAN-CVE-2020-36518 | Debian 14 | 2.13.2.2-1 | 1 | Mar 11, 2022 | |
| High | RHSA-2021:1775 | RHEL 8 | 0:2.10.0-1.module+el8.2.0+5059+3eb3af25 | 1 | May 18, 2021 | |
| Patch now | RHSA-2020:4847 | RHEL 8 | 0:2.10.0-1.module+el8.2.0+5059+3eb3af25 | 17 | 2 | Nov 4, 2020 |
| High | RHSA-2020:1644 | RHEL 8 | 0:2.10.0-1.module+el8.2.0+5059+3eb3af25 | 12 | Apr 28, 2020 | |
| High | RHBA-2019:3416 | RHEL 8 | 0:2.9.9.2-1.module+el8.1.0+3832+9784644d | 2 | Nov 5, 2019 | |
| High | RHSA-2019:2720 | RHEL 8 | 0:2.9.9.2-1.module+el8.0.0+3892+c903d3f0 | 1 | Sep 12, 2019 | |
| High | RHSA-2019:1529 | RHEL 8 | 0:2.9.8-1.module+el8.0.0+3248+9d514f3b | 4 | Jun 18, 2019 |